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This  book  bequeaths  to  the  Defense  Intelligence  Agency,  and  to  the  Intelligence  Community  at  large,  a 
substantiated  vision,  with  examples,  of  how  analysts  can  exploit  already-available,  massive  databases 
to  tackle  many  of  the  most  vexing  problems  that  we  face.  Dr.  Bodnar  builds  on  the  earlier  work  and 
insight  of  Cynthia  Grabo,  whose  book  Anticipating  Surprise:  Analysis  for  Strategic  Warning  was 
recently  published  by  the  Joint  Military  Intelligence  College’s  Center  for  Strategic  Intelligence 
Research.  The  author  also  usefully  integrates  into  this  book  the  often-cited  but  rarely-seen  original 
work  of  the  USAF’s  strategic  and  operational  philosopher  Colonel  John  Boyd.  Together  with  the 
accompanying,  classified  case  studies  that  are  available  to  the  Community  on  Intelink,  this  book 
reaches  farther  than  any  other  toward  the  objective  of  bringing  together  substantive  expertise  with  an 
accessible,  methodologically  sound  analytical  strategy  in  the  service  ot  the  U.S.  Intelligence  Commu¬ 
nity.  Those  who  go  on  to  apply  this  method  will  not  only  derive  fresh  understanding  from  existing 
data,  but  will  also  be  able  to  guide  future  intelligence  collection  in  an  appropriately  frugal  fashion. 
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COMMENTARIES 

Warning  Analysis  For  The  Information  Age: 
Rethinking  The  Intelligence  Process 

JEFFREY  R.  COOPER* 

Looking  toward  the  challenges  posed  to  the  Intelligence  Community  by  the 
changed  strategic  circumstances  of  the  Information  Age,  Dr.  Bodnar,  an  experi¬ 
enced  intelligence  analyst  with  a  deep  technical  background,  weaves  together 
four  themes  in  addressing  the  emerging  demands  of  warning  intelligence.  The 
important  core  theme  is  the  utility  of  his  Multidimensional  Analysis  (MDA) 
methodology  in  confronting  the  complexity  of  Information-Age  warning  chal¬ 
lenges,  an  analytic  approach  he  developed  while  working  on  a  variety  of  prob¬ 
lems  posed  by  foreign  development  of  weapons  of  mass  destruction.  The  second 
theme  builds  on  Cynthia  Grabo’s  recently  republished  classic  Handbook  of  Warn¬ 
ing  Intelligence  and  tunes  those  lessons  for  Information-Age  rather  than  Indus¬ 
trial-Age  conditions.  Bodnar’s  third  theme  is  to  highlight  the  utility  of  Col.  John 
Boyd’s  theory  of  the  OODA-loop  decision  cycle  and  integrate  it  into  the  warning 
analysis  framework.  Finally,  from  his  perspective  as  a  working  analyst,  Bodnar 
provides,  in  a  series  of  suggestions  on  fixing  analytical  and  resource  constraints,  a 
strategy  to  improve  intelligence  analysis.  To  this  interesting  and  useful  work,  I 
would  offer  several  thoughts  for  additional  emphases. 


OVERALL  COMMENTS 

Properly  in  my  view,  Bodnar,  in  concert  with  many  observers,1  sees  the  Infor¬ 
mation  Age  as  signifying  a  fundamental  shift  away  from  a  deterministic  and  lin¬ 
ear  Newtonian  paradigm  to  a  complex  adaptive  systems  perspective  grounded  in 
non-linearity  and  modern,  quantum  physics.  Bodnar  integrates  this  “paradigm 
shift’’  theme  throughout  his  paper;  however,  perhaps  in  keeping  with  his  scientific 
background  and  in  focusing  narrowly  on  the  analytical  issues,  he  fails  to  fully 


*Corporate  Vice-President  for  Technology  and  Chief  Scientist,  Science  Applications  International 
Corporation  Strategies  Group. 

^ee,  for  example,  David  S.  Alberts  and  Thomas  J.  Czerwinski,  eds..  Complexity,  Global  Politics, 
and  National  Security  (Washington,  DC:  National  Defense  University  Press,  June  1997). 
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appreciate  other  distinctive  elements  of  that  Industrial-Age  model,  besides  the 
deterministic  Newtonian  linearity,  that  are  now  also  changing  and  contributing  to 
our  emerging  warning  problems. 

Industrial-Age  powers  drew  their  strength  from  three  underlying  and  interre¬ 
lated  roots:  political,  economic,  and  technological.  First,  building  upon  the  post- 
Westphalian  emergence  of  nationalism,  these  nation-states  drew  legitimacy  and 
political  strength  from  large  cohesive  publics,  which  could  also  provide  sizable 
military  forces.  Second,  industrialization  and  mass  production  fueled  rapid  eco¬ 
nomic  growth  that  together  allowed  these  nation-states  to  field  and  support  very 
large  military  forces.  Third,  new  technologies  provided  large-scale  mobility  and 
immensely  lethal  firepower  for  these  forces,  enabling  offensive  military  opera¬ 
tions  at  a  distance.  The  potency  of  scale  dominated  the  sources  of  national  power, 
but  the  Industrial  Age  required  efficient  organizations  and  processes  to  harness 
and  exploit  this  power.  Thus,  the  importance  of  Weber’s  hierarchical  bureaucra¬ 
cies  that  brought  professionalization,  specialization  and  routinization  to  manage¬ 
ment.  Also,  Taylor’s  application  of  standardized  and  systematized  processes  to 
manufacturing  cannot  be  overemphasized  as  key  elements  of  the  Industrial- Age 
paradigm  that  demanded  the  ability  to  predict  and  control  these  mass-scale  enti¬ 
ties. 

Throughout  the  Industrial  Age,  these  same  factors — mass,  standardization,  and 
predictability — also  underwrote  the  sources  of  military  strength  and  shaped  strat¬ 
egies  and  operational  approaches  to  warfare.  But  those  very  qualities  also  enabled 
us  to  adopt  and  exploit  a  warning  paradigm  based  on  assumptions  (such  as  mass 
and  linearity)  that  danger  would  come  from  large-scale  activities.  These  threats, 
almost  by  definition,  would  be  visible — and  deterministically  predictable — if  we 
could  access  their  signatures.  The  Information  Age  has  changed  these  comfort¬ 
able  assumptions  about  the  tractability  of  providing  warning  based  on  observable 
activities  and  predictable  processes;  new  threats  may  come  in  very  small  pack¬ 
ages  that  are  difficult  to  detect,  or  subtle  activities  with  non-linear  consequences 
that  are  hard  to  observe.  While  I  might  disagree  with  Bodnar  as  to  the  magnitude 
of  the  threat  posed  by  many  of  these  new  challenges  (especially  as  compared  with 
tens  of  thousands  of  nuclear  weapons  wielded  with  deadly  malice),  I  certainly 
agree  that  this  new  environment  is  more  challenging,  with  respect  to  knowability 
(in  the  formal  sense),  observability,  and  predictability  if  we  continue  to  rely  on 
our  inherited  tools  and  practices.  Exactly  for  this  reason,  I  would  strengthen  Bod¬ 
nar’s  implicit  call  to  re-examine  issues  of  analytic  process.  This  will  demand 
returning  to  first-order  issues  of  both  phenomenology  and  epistemology. 

A  second  area  that  I  would  emphasize  is  the  diversity  of  the  new  warning  chal¬ 
lenges.  First,  I  would  emend  Bodnar’s  definitions  of  warning.  All  intelligence 
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informs  decisionmakers;  but  warming  intelligence  is  distinctive  because  it  must  be 
intended  to  trigger  action  by  the  decisionmaker.  Strategic  warning  intelligence 
especially  must  concern  itself  not  just  that  a  nation  (or  other  group)  may  hold 
hostile  intentions  and  be  acquiring  appropriate  capabilities  to  serve  them,  but  also 
that  other  changes — such  as  new  technologies,  political  institutions  or  dynamics, 
economic  dislocations,  or  challenges  to  human  security  such  as  disease  or  envi¬ 
ronmental  catastrophe,  could  pose  fundamental  challenges  to  U.S.  interests  or 
policies.  I  would  also  add  Operational  Warning  to  his  categorization. 

Tactical  Warming  (TW)  is  an  alert;  it  should  denote  that  the  activity  of  concern 
(such  as  a  surprise  attack)  is  immediately  imminent  or  unfortunately  underway.  It 
should  be  specific  with  respect  to  at  least  where  and  when,  even  it  cannot  answer 
who  and  how.  As  Bodnar  correctly  notes,  response  to  TW  is  immediate  and  must 
be  with  resources  and  plans  at  hand.  Strategic  Warning  (SW)  should  identify  the 
existence  of  a  potential  threat,  either  in  terms  of  intention  or  capability,  and  pro¬ 
vide  sufficient  time  for  policymakers  to  assimilate,  plan,  and  provide  resources 
for  offsetting  responses,  as  Bodnar  recognizes.  Operational  Warning  is  the  essen¬ 
tial  link  between  these  two;  it  both  alerts  that  the  adversary  is  preparing  to 
embark  upon  his  inimical  activity  and  identifies  its  particular  character.  It  pro¬ 
vides  the  necessary  time  to  mobilize  and  activate  the  response,  as  well  as  to  trig¬ 
ger  close  monitoring  of  the  indicators  for  TW.  As  an  example,  appropriate 
Strategic  Warning  in  the  mid-1990s  would  have  alerted  that  Islamic  Fundamen¬ 
talism  was  becoming  a  strategic  threat  to  U.S.  global  interests.  Operational  Warm¬ 
ing  would  have  cued  that  both  Al-Qaeda  and  “airplanes  as  bombs”  were 
instrumentalities  of  particular  concern.  Tactical  Warning  would  have  provided 
notice  of  imminent  attack.  The  warning  failure  of  9/1 1  was  not  merely  the  lack  of 
Tactical  Warming,  but  Operational  and  Strategic  as  well. 

In  the  MDA,  Bodnar-  provides  a  six-dimensional  methodology  that  is  very 
structured,  but  inherently  flexible  in  terms  of  the  particular-  analytic  tools  and 
models  that  can  be  incorporated.  It  is  gratifying  that  he  also  appreciates  how  lim¬ 
ited  the  evidence-driven  “connect  the  dots”  model  is  in  its  applicability  and  that 
employing  other  models  that  rely  more  on  hypothesis  generation  and  testing  are 
essential.  Moreover,  although  Bodnar  lives  within  an  “evidence-based  culture,” 
he  stresses  the  need  to  provide  context  as  the  only  way  to  ensure  that  the  evidence 
can  be  interpreted  correctly;  “the  facts”  don’t  speak  for  themselves.  In  particular, 
he  highlights  the  need  to  adopt  recursive  hypothesis  generation  and  testing  proto¬ 
cols  to  ensure  that  anomalous  information  is  not  simply  ignored  or  drowned  by 
masses  of  confirmatory  evidence  fed  in  streams  enriched  as  an  inadvertent  by¬ 
product  of  a  filtering  process  based  on  “a  priori  relevance”  determinations. 
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In  addition  to  his  promoting  the  inherent  strengths  of  the  MDA  methodology, 
Bodnar  is  particularly  strong  in  making  useful  suggestions  on  improving  other 
analytic  processes  in  intelligence  by  adopting  similarly  structured  practices  more 
akin  to  scientific  research  than  to  the  humanities. 

Other  Specific  Comments 

By  highlighting  MDA  only  within  the  context  of  warning  intelligence,  Bodnar 
significantly  shortchanges  its  potential  utility  to  address  other  serious  intelligence 
analysis  shortfalls.  As  one  element  of  his  fourth  theme,  he  recognizes  the  perva¬ 
sive  adverse  impacts  of  emphasizing  current  intelligence  over  assessments  and 
estimative  intelligence — including  in-depth  warning  analysis — but  he  fails  to 
suggest  explicitly  that  such  structured,  multi-element  analytic  procedures  could 
also  improve  many  other  types  of  intelligence  efforts  as  a  co  rice  five  to  the  repor- 
torial  character  of  current  intelligence. 

Although  focused  on  improving  warning  intelligence,  Bodnar  touches  lightly 
on  a  number  of  other  existing  problems  that  impede  good  intelligence  analysis 
overall.  He  usefully  suggests  that  a  multi-step  analytic  process  include  a  system¬ 
atic  examination  of  how  we  model  the  adversary  and  conduct  the  entire  analysis 
process.  The  frequent  and  advised  references  to  “tradecraft”  in  community  writ¬ 
ings  recognize  the  continuing  craft  character  of  the  intelligence  enterprise, 
despite  the  trappings  of  advanced  technologies.  One  little-understood  conse¬ 
quence  of  the  craft  culture,  however,  is  the  evolutionary  and  accreted  nature  of 
analytic  practices  and  habits — especially  those  that  proved  successful  in  the  past; 
a  second  is  the  relative  lack  of  systematic  examination  of  these  analytic  processes 
and  the  epistemology  that  underlies  them.  In  an  era  of  rapid  and  significant 
change,  a  craft  culture  may  not  be  able  to  adapt  sufficiently  quickly  to  meet  the 
new  challenges.  Moreover,  in  a  craft  culture,  much  critical  domain  expertise  and 
process  information  (as  well  as  standards,  values,  and  elan)  often  remains  tacit 
and  embodied  in  human  expertise — or  in  individual  analyst’s  “shoeboxes” — 
rather  than  instantiated  in  structured,  catalogued  and  retrievable  form  accessible 
to  others.  He  highlights  the  importance  of  addressing  this  issue  before  that  exper¬ 
tise  is  lost  forever. 

Bodnar  recognizes  that  waiting  on  customer  requests  to  build  the  in-depth  ana¬ 
lytic  base  necessary  to  MDA,  as  well  as  to  other  intelligence  efforts,  may  not  pro¬ 
vide  sufficient  time  to  do  the  job  properly  when  the  need  for  good  answers 
becomes  pressing.  In  doing  so,  he  implicitly  raises  the  key  issue  of  how  the  IC 
can  be  more  proactive  and  go  beyond  the  formal  customer-driven  requirements 
process.  Bodnar  also  recognizes  that  despite  the  customer’s  usual  interest  in  “an 
answer,”  not  all  “stories”  are  linear;  he  recognizes  that  telling  the  correct  story  in 


a  manner  that  ensures  the  listener  truly  understands  the  message  is  essential.  He 
also  exposes  the  serious  issue  that  while  very  substantial  resources  have  been 
invested  in  the  IC’s  information  infrastructure,  relatively  little  has  been  spent  on 
tools  to  enhance  the  individual  analyst’s  cognitive  performance — especially 
among  all-source  analysts,  or  to  effectively  support  endemic  work  practices  such 
as  “shoeboxes.” 


ADDITIONAL  COMMENTARIES: 

Warning  Analysis  For  The  Information  Age: 
Rethinking  The  Intelligence  Process 

Dr.  Norman  Kahn* 

Dr.  Bodnar’s  work  identifies  and  integrates  a  number  of  elements  critical  to  the 
Intelligence  Community’s  understanding  of  efforts  on  the  part  of  both  state  and 
non-state  actors  to  develop  weapons  of  mass  destruction.  Specifically,  he  identi¬ 
fies  human  sources,  signals  intelligence,  and  open-source  exploitation  as  key  fac¬ 
tors;  and  he  develops  a  potent  argument  for  integrating  information  on  people, 
places  and  programs  and  making  this  information  available  to  the  intelligence 
analyst  in  the  form  of  automated  relational  databases.  This  approach,  which  he 
defines  as  “multidimensional  analysis,”  is  already  in  use  by  savvy  analysts.  Its 
widespread  acceptance  clearly  will  enhance  the  Community’s  ability  to  provide 
deeper  and  more  sophisticated  input  to  policymakers  who  bear  the  ultimate 
responsibility  of  responding  to  national  security  threats. 

F.  J.  Hughes** 

We  are  indeed  at  the  threshold  of  a  paradigm  shift  in  intelligence  analysis.  The 
research  work  of  the  Advanced  Research  Development  Activity  (ARDA),  an 
Intelligence-Community-wide  effort,  is  seeking  to  define  how  we  should  advance 
our  strategies,  operational  concepts,  and  organizations  in  a  fashion  corresponding 
to  Dr.  Bodnar’s  vision.  ARDA  brings  a  potent  dynamic  into  play  that  focuses  on 
Discovery,  Exploitation,  and  Analysis  of  intelligence  information.  Bodnar  is  a 
harbinger  of  a  powerful  shift  in  thinking  that  can  shape  the  future  of  intelligence 
in  a  world  that  has  changed  dramatically.  His  work  represents  a  significant  step 
forward  in  intelligence  studies  and  serves  as  an  invaluable  reference  for  tomor¬ 
row’s  intelligence  analysts  who  confront  the  task  of  implementing  complex  judg¬ 
mental  analysis. 


*Program  Manager.  Bio-Defense  Programs,  Intelligence  Technology  Innovation  Center. 

**Faculty  Member,  Joint  Military  Intelligence  College. 


Chapter  1 


STRATEGIC  WARNING  IN  A  WORLD  OF  WEAPONS  OF  MASS 
DESTRUCTION  (WMD)  AND  TERRORISM 

John  W.  Bodnar,  PhD 

Changes  in  technology  in  the  past  half  cen  tury  have  destroyed  the  ability 
to  provide  warning  intelligence  by  traditional  means.  How  can  new  tech¬ 
nologies  facilitate  new  methodologies  to  provide  warning  intelligence  in 
the  Information  Age? 

Sputnik,  9/11,  and  the  End  of  Warning  Intelligence 

The  9/11  attacks  made  very  clear  that  the  concept  of  warning  intelligence  has 
totally  changed.  I  suggest  that  the  ability  to  provide  warning  intelligence  was  not 
very  different  up  to  the  beginning  of  World  War  II  from  what  it  was  in  prehistoric 
times,  but  the  changes  in  technology  during  that  war  began  a  new  age  of  intelli¬ 
gence.  To  understand  these  changes  and  their  effects,  to  start  with,  we  need  a  def¬ 
inition  of  warning;  I  suggest: 

■  Tactical  Warning  —  warning  of  potential  actions  by  an  adversary  to  which  a 
response  can  be  mounted  with  current  resources. 

■  Strategic  Warning  —  warning  of  potential  actions  by  an  adversary  for  which 
a  response  will  require  a  significant  reallocation  of  resources. 

The  aim  of  warning  intelligence  is  to  be  able  to  provide  warfighters  and  policy¬ 
makers  with  specific  indicators  of  the  potential  actions  of  the  adversary.  We  also 
need  to  realize  that  most  of  the  intelligence  we  do  is  not  warning  but  rather  cur¬ 
rent  intelligence.  Current  Intelligence  is  matching  recently  collected  intelligence 
against  warning  indicators  to  be  able  to  predict  the  next  actions  of  the  adversary. 

Every  society  has  a  need  to  provide  resources  both  for  its  defense — “guns” — 
and  for  its  sustaining  infrastructure  or  economy — “butter.”  A  best-case  scenario 
for  a  society  would  be  an  environment  where  it  did  not  have  to  provide  for 
defense  so  it  could  allocate  all  its  resources  toward  its  economy,  but,  with  the 
possible  exception  of  some  remote  Pacific  islands,  societies  have  always  had  to 
reallocate  at  least  some  of  their  resources  toward  a  military.  The  next-best  sce¬ 
nario  is  for  a  society  to  allocate  virtually  all  its  resources  to  “butter”  and  only 
build  “guns”  when  attack  from  without  is  imminent.  A  society  that  can  have 
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“blitter  now”  to  build  a  strong  economy  but  only  build  “guns  later”  when  it  sees 
an  imminent  attack  will  be,  in  the  long  run,  stronger  than  a  society  that  needs  a 
standing  military. 

A  “butter-now-guns-later”  strategy  depends  on  strategic  warning.  A  wholesale 
change  from  a  peacetime  economy  to  a  wartime  economy  requires  time,  and  if 
intelligence  is  not  available  and  used  for  a  national-level  policy  change,  the 
nation  will  find  itself  with  only  “butter”  and  some  half-built  “guns”  in  the  face  of 
a  fully  armed  opponent. 

The  Roman  Empire  survived  for  centuries  in  paid  because  it  could  provide 
effective  strategic  warning.  Since  Roman-era  intelligence  could  travel  only  as  fast 
as  military  forces  that  might  be  on  the  move,  it  was  not  unheard-of  that  a  force  of 
a  hundred  thousand  Persians  could  come  over  the  hill  toward  a  village  on  the 
frontiers  of  the  Roman  Empire  without  any  prior  warning.  This  lack  of  tactical 
warning  meant  that  the  forces  immediately  at  hand  would  be  overrun,  but  while 
that  occurred,  warning  could  be  passed  throughout  the  Empire.  This  strategic 
warning  would  then  allow  a  reallocation  of  assets  to  meet  the  threat:  either  a 
massing  of  legions  from  far-flung  areas  along  the  well-maintained  roads;  or  a  call 
up  or  arming  of  troops  from  the  populace  of  the  neighboring  regions.  The  ability 
to  reallocate  standing  forces  or  change  from  “butter”  to  “guns”  meant  that  the 
price  paid  in  taxes  across  the  Empire  was  considered  small  in  contrast  to  the  secu¬ 
rity  afforded  by  the  Empire. 

In  contrast,  the  nations  of  nineteenth  century  Europe  could  not  employ  a  “but- 
ter-now-guns-later”  strategy  because  an  invading  army  could  go  through  the 
entire  nation  before  there  was  any  hope  of  raising  a  military  force  from  scratch. 
In  that  era,  warning  intelligence  required  collection  inside  other  nations  to  follow 
their  military  buildup.  This  led  to  the  presence  of  standing  armies  across 
Europe — a  “both  guns  and  butter”  strategy — by  which  every  nation  attempted  to 
have  a  tactical  warning  capability  to  spark  the  call  up  of  a  large  enough  force, 
instantly,  to  repel  the  attacks. 

The  Information  Age  and  the  End  of  Warning  Intelligence 

Up  through  World  War  II  the  United  States  had  the  ability  to  provide  strategic 
warning  in  a  way  similar  to  that  of  the  Roman  Empire.  In  the  absence  of  any 
national  threats  in  the  Americas,  the  navy  on  the  oceans  surrounding  the  U.S.  pro¬ 
vided  a  “tripwire”  in  much  the  same  way  as  the  Roman  legions  on  the  frontiers  of 
the  Empire.  Once  in  place,  this  system  then  only  needed  to  use  current  intelli¬ 
gence  to  mobilize  the  proper  response  to  a  threat.  This  provided  the  U.S.  with  the 
ability  to  employ  a  “butter-now-guns-later”  strategy  where  it  could  maintain  a 


2 


primarily  civilian  economy  but  only  mobilize  in  times  of  national  threat.  In  this 
sense,  Pearl  Harbor  was  a  tactical  surprise  but  not  a  strategic  surprise.  The  attack 
caused  massive  local  damage  and  destruction  to  the  Pacific  fleet,  but  due  to  the 
size  of  the  Pacific  Ocean  the  attack  itself  served  as  strategic  warning  in  that  it 
gave  the  U.S.  a  “wakeup  call”  to  change  from  “butter”  to  “guns”  with  plenty  of 
time  to  meet  the  expanding  Japanese  and  Axis  threat. 

In  spite  of  a  huge  tactical  surprise  at  Pearl  Harbor,  the  U.S.  homeland  was 
never  in  significant  danger  because  the  U.S.  has  the  ability  to  change  very  rapidly 
from  an  inward-looking  civilian  economy  to  an  outward-looking  military  jugger¬ 
naut.  The  vast  expanse  of  oceans  surrounding  the  U.S.  meant  that  strategic  warn¬ 
ing  was  not  very  hard.  Strategic  warning  always  implied  threats  that  were 
distant — either  in  space  or  time.  But  that  changed  markedly  twice  in  the  lifetimes 
of  those  who  remember  Pearl  Harbor — as  space  and  time  “shrank”  as  the  world 
entered  the  Information  Age.  For  the  U.S.,  not  only  strategic  warning  but  even 
tactical  warning  virtually  disappeared. 

The  first  blow  to  the  U.S.’s  ability  to  provide  warning  intelligence  came  with 
the  launch  of  Sputnik.  As  soon  as  the  Soviet  Union  had  the  technical  capability  to 
build  and  employ  targetable,  nuclear-tipped  ICBM’s,  the  world  instantly  shrank 
to  the  functional  equivalent  of  eighteenth-century  Europe.  The  U.S.  could  be 
threatened  by  a  military  force  that  could  be  built  virtually  unseen  inside  the 
Soviet  Union  and  employed  with  only  minutes’  worth  of  warning.  This  meant 
that  the  U.S.  could  no  longer  think  “butter-now-guns-later”  and  led  to  an  arms 
race  reminiscent  of  those  involving  England,  France,  Prussia,  and  Austria  in  the 
1800s,  where  standing  armies  were  the  order  of  the  day.  Even  though  the  Soviet 
Union  was  half-a-world  away,  it  was  only  twenty  minutes  away  as  the  missile 
flies  over  the  North  Pole.  The  coupling  of  WMD  with  long-range  delivery  sys¬ 
tems,  in  the  form  of  missiles  tipped  with  nuclear  warheads,  changed  warfare  and 
warning  intelligence  forever. 

In  the  world  of  WMD,  our  “strategic  weapons”  and  “Strategic  Air  Force” 
really  only  could  have  tactical  warning — the  ability  to  respond  now  with 
resources  currently  available.  This  was  a  wakeup  call  for  the  U.S.  because  strate¬ 
gic  warning,  as  we  had  previously  known  it,  was  gone.  In  the  Cold  War,  tactical 
warning  was  possible  by  monitoring  missile  silos  and  military  movements  by  sat¬ 
ellite.  But  true  strategic  warning  was  gone.  The  U.S.  now  needed  to  maintain  a 
large,  standing  military  for  the  first  time  in  its  history — a  shift  from  a  “butter- 
now-guns-later”  strategy  to  a  much  costlier  “both-guns-and-butter”  strategy. 

The  second  blow  to  the  U.S.  ability  to  provide  warning  intelligence  came  on 
11  September  2001.  Terrorist  attacks  from  within  the  U.S.  itself  directed  by  ter- 
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rorist  groups  half-a- world  away  meant  that  time  had  shrunk  after  9/11  just  as 
space  had  shrunk  after  Sputnik.  In  this  case  the  wakeup  call  was  the  realization 
that  tactical  warning,  as  it  has  always  been  defined,  was  also  gone.  Tactical  warn¬ 
ing  always  depended  on  monitoring  the  movements  of  opposing  military  forces 
and  deploying  current  assets  to  meet  the  threat.  But  what  if  the  threat  was  U.S. 
persons  using  U.S.  assets  within  the  continental  U.S.?  The  very  foundation  of 
even  tactical  warning  was  shattered  in  a  world  where  an  attack  ordered  anywhere 
in  the  world  could  come  virtually  anywhere,  anytime,  with  assets  that  were  them¬ 
selves  peaceful  only  minutes  before. 

Additionally,  in  the  Information  Age  the  concept  of  a  nation-state  has  blurred 
to  where  multi-national  corporations  and  agencies  sometimes  are  as  powerful  as 
the  nations  in  which  they  operate.  Therefore,  in  a  world  of  non-national  terrorist 
organizations  and  alliances  that  can  shift  between  religious  and  political  affiliates, 
collecting  intelligence  on  a  state  may  often  be  misleading  or  irrelevant  unless  it  is 
integrated  with  intelligence  on  that  state’s  interactions  not  only  with  other  coun¬ 
tries  but  multi-national  corporations  and  organizations  as  well. 

For  the  U.S.,  the  post-9/1 1  world  in  the  dawn  of  the  Information  Age  is  more 
different  from  the  Industrial- Age  world  of  Pearl  Harbor  than  world  of  Pearl  Har¬ 
bor  was  different  from  the  world  of  the  Roman  Empire. 

In  the  Information  Age,  the  Intelligence  Community  (IC)  in  the  U.S.  is  faced 
with  unprecedented  challenges: 

■  How  can  it  provide  strategic  warning  in  a  world  of  WMD  where  a  massive 
attack  from  half-a-world  away  can  occur  minutes  from  now? 

■  How  can  it  provide  tactical  warning  in  a  world  of  terrorism  where  adversaries 
who  looked  peaceful  minutes  ago  can  attack  inside  the  U.S.  minutes  from 
now? 

This  requires  a  total  rethinking  about  what  we  mean  by  warning  intelligence. 

Warning  Intelligence  for  the  Information  Age 

In  1972  the  Defense  Intelligence  Agency  published  Cynthia  Grabo’s  Hand¬ 
book  of  Warning  Intelligence,  re -published  by  the  Joint  Military  Intelligence  Col¬ 
lege  in  an  updated  and  declassified  version  in  2002  as  Anticipating  Surprise: 
Analysis  for  Strategic  Warning.  Ms.  Grabo  laid  the  groundwork  to  codify  theories 
on  warning  intelligence  and  strategic  warning.  I  aim  to  build  on  her  thoughts  to 
indicate  that  warning  intelligence  at  the  dawn  of  the  Information  Age  is  as  impor¬ 
tant — or  even  more  important — as  it  was  when  she  wrote  her  first  manuscript  at 
the  height  of  the  Cold  War.  However,  the  technological  changes  that  have  shrunk 
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the  world  in  both  space  and  time  are  changing  the  very  nature  of  intelligence. 
Therefore.  I  will  draw  heavily  on  Ms.  Grabo’s  thoughts — sometimes  to  reiterate 
timeless  lessons  on  warning  intelligence  and  sometimes  to  indicate  the  need  for 
an  Information- Age  addition  to  her  Industrial-Age  argument. 

Warning  intelligence  at  the  strategic  level,  or  as  it  is  sometimes  called 
“indications  intelligence,”  is  largely  a  post-World  War  II  development. 

More  specifically,  it  was  a  product  of  the  early  days  of  the  Cold  War, 
when  we  began  to  perceive  that  the  Soviet  Union  and  other  communist 
countries  were  embarked  on  courses  inimical  to  the  interests  of  the  Free 
World  and  which  could  lead  to  surprise  actions  or  open  aggression. 

Enemy  actions  in  World  War  II,  such  as  the  Japanese  attack  on  Pearl  Har¬ 
bor  in  1941,  had  dispelled  many  of  the  conventional  or  historical  con¬ 
cepts  about  how  wars  begin.  The  fear  that  America’s  enemies  once  again 
might  undertake  devastating,  suiprise  military  action — and  without  prior 
declaration  of  war  or  other  conventional  warning — had  become  very  real. 

The  advent  of  modern  weapons  and  long-range  delivery  systems  further 
increased  the  need  for  warning  to  avoid  suiprise  attack. 1 

Cynthia  Grabo 

Anticipating  Surprise:  Analysis  for  Strategic  Warning 

As  indicated  by  Ms.  Grabo  above,  “warning  intelligence”  got  its  start  in 
response  to  the  shattering  of  the  old  paradigm  for  strategic  warning,  when  the 
oceans  could  no  longer  serve  as  a  tripwire.  In  the  past  we  could  afford  suiprise. 
While  Pearl  Harbor  was  tactically  devastating,  it  was  not  strategically  devastat¬ 
ing.  Indeed,  Admiral  Yamamoto,  the  commander  of  the  Japanese  fleet  at  Pearl 
Harbor  was  believed  to  have  realized  the  strategic  mistake  in  that  attack  in  saying, 
“We  have  just  roused  a  sleeping  giant.”  In  an  age  of  WMD  even  tactical  surprise 
is  not  an  allowable  option  because  a  single  attack  with  a  single  biological  or 
nuclear  weapon  can  potentially  be  worse  than  multiple  Pearl  Harbors. 

In  an  era  of  asymmetric  warfare  in  which  our  national  security  and  well 
being  can  be  seriously  threatened  by  hostile  groups  as  well  as  nations,  it 
is  imperative  that  lessons  from  the  past  not  be  forgotten  but  brought  up  to 
date  and  the  discipline  of  warning  reinvigorated.  Warning  intelligence 
differs  significantly  from  current  intelligence  and  the  preparation  of  long- 
range  estimates.  It  accepts  the  presumption  of  suiprise  and  incomplete 


'Cynthia  M.  Grabo,  Anticipating  Surprise:  Analysis  for  Strategic  Warning,  ed.  Jan  Goldman 
(Washington  DC:  Joint  Military  Intelligence  College's  Center  for  Strategic  Intelligence  Research, 
2002),  1.  Cited  hereafter  as  Grabo. 
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intelligence  and  requires  exhaustive  research  upon  which  to  build  the 
case  for  specific  warning.2 

LTG  James  Williams  (Ret.),  USAF 
Former  Director,  Defense  Intelligence  Agency 

The  new  Directorate  for  Analysis  will  be  charged  with  transforming 
our  analysis  from  descriptive  assessments  to  complex  judgmental 
analysis  required  to  identify  vulnerabilities  and  provide  options  for 
policymakers  and  warfighters.3 

VADM  Lowell  E.  Jacoby 
Director,  Defense  Intelligence  Agency 

Warning-oriented  intelligence  reflects  a  compelling  need — unprecedented 
prior  to  the  development  of  WMD — not  to  be  surprised.  By  not  being  surprised,  I 
mean  that  analysts  must  be  able  to  provide  detailed  enough  judgments — with 
supporting  reporting — so  that  both  the  warfighter  and  the  policymaker  can  antici¬ 
pate  the  actions  of  potential  adversaries  and  take  timely  action  to  support  U.S. 
interests.  In  short,  it  is  incumbent  on  the  Information- Age  analyst  to  provide  both 
the  warfighter  and  policymaker  with  options:  On  the  basis  of  what  the  adversary 
has  the  capability  to  do,  how  will  he  likely  act?  What  actions  can  we  take  to  stop, 
change,  or  respond  to  those  actions,  and  what  are  the  probable  consequences  of 
those  actions? 

To  do  this,  the  Information-Age  warning  analyst  must  be  able  to  peer  into  the 
future  with  a  level  of  granularity  many  times  more  detailed  than  ever  required 
before.  Rather  than  providing  targeting  to  the  warfighter  at  the  level  of  which  city 
or  military  base  contains  the  threat,  the  Information- age  analyst  must  be  able  to 
tell  the  warfighter  which  building  half-a-world-away  contains  the  nuclear  device 
or  BW  fermenter  so  that  he  can  interdict  that  facility  with  a  single  smart  bomb  or 
cruise  missile  with  minimal  collateral  damage.  Rather  than  giving  the  policy¬ 
maker  broad-brush  descriptions  of  a  country’s  WMD  capabilities,  the  Informa¬ 
tion-Age  analyst  must  be  able  to  tell  the  policymaker  exactly  where  that  state  is 
procuring  the  materials  to  build  that  nuclear  or  biological  weapon  so  that  he  can 
demarche  the  shipment  of  supplies  before  the  weapon  can  be  assembled.  If  the 


2LTG  James  Williams  (Ret.),  USA,  Former  Director,  Defense  Intelligence  Agency,  quoted  in 
Cynthia  M.  Grabo,  Anticipating  Surprise:  Analysis  for  Strategic  Warning,  ed.  Jan  Goldman 
(Washington  DC:  Joint  Military  Intelligence  College's  Center  for  Strategic  Intelligence  Research, 
2002),  iii. 

3VADM  Lowell  E.  Jacoby,  Director,  DIA,  as  posted  on  the  Director’s  Intelink  home  page,  Feb¬ 
ruary  2003. 
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Industrial-Age  analyst  miscounted  a  single  aircraft  carrier  or  tank,  that  really  did 
not  affect  the  course  of  the  war  very  much  or  the  policy  to  reduce  the  risk  of  that 
war;  but  if  the  Information-Age  analyst  assesses  that  a  nation  has  zero  nuclear 
weapons  when  they  really  have  one  or  two,  the  results  could  be  devastating. 
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Chapter  2 


FROM  CURRENT  INTELLIGENCE  TO  WARNING  ANALYSIS 

A  new  kind  of  strategic  warning  is  required  for  WMD  and  terrorism.  How 
can  we  rethink  our  assumptions  on  intelligence  to  redefine  methodologies 
for  providing  strategic  warning? 

As  the  ability  to  collect  intelligence  and  project  power  has  increased  with  the 
massive  technological  breakthroughs  of  the  past  half-century,  the  pace  of  the 
intelligence  cycle  has  increased.  This  has  put  a  premium  on  collecting  and  report¬ 
ing  current  intelligence.  Cynthia  Grabo  has  argued  that  current  intelligence  is  dif¬ 
ferent  from  warning  intelligence. 

As  intelligence  collection  becomes  more  sophisticated,  voluminous  and 
expensive,  and  devices  multiply  for  the  rapid  reporting  and  community¬ 
wide  exchange  and  display  of  the  latest  information,  we  must  take  care 
that  we  do  not  lose  sight  of  what  warning  really  is:  the  considered  judg¬ 
ment  of  the  finest  analytic  minds  available,  based  on  an  exhaustive  and 
objective  review  of  all  available  indications,  which  is  conveyed  to  the 
policy  official  in  sufficiently  convincing  language  that  he  is  persuaded  of 
its  validity  and  takes  appropriate  action  to  protect  the  national  interest.4 

She  further  notes  that  the  requirements  for  current  intelligence  and  warning 
intelligence  are  very  different  in  their  pace  and  approach. 

It  is  possible  that  the  single  most  prevalent  misconception  about  warning 
is  that  the  latest  information  is  necessarily  the  most  important,  or  that 
warning  will  be  insured  (or  at  least  made  much  more  likely)  if  only  col¬ 
lection  can  be  speeded  up  and  information  communicated  more  rapidly 
to  more  alert  centers.  The  effects  of  this  type  of  preoccupation  with  cur¬ 
rency  of  information  are  likely  to  be  twofold:  long-term,  basic  intelli¬ 
gence  and  in-depth  analysis  tend  to  suffer  both  in  the  allocation  of 
personnel  and  in  prestige;  and  the  cumulative  analysis  of  indications 
tends  to  be  forgotten  in  favor  of  portraying  the  latest  information  on 
charts  or  display  boards  in  situation  rooms.  From  this,  it  is  but  a  step  to 
accepting  the  view  that  what  the  adversary  is  doing  this  minute  is  the 
most  important  indication  of  his  intentions,  or  that  information  which  is 
more  than  24  hours  old  is  valueless  or  at  least  of  minor  value  to  warning. 


4  Grabo,  169. 
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But  this  is  not  strategic  warning — and  excessive  attention  to  current 
information  tends  to  obscure  the  significance  of  strategic,  long-term 
actions  by  a  potential  adversary.5 

Ms.  Grabo’s  message  is  clear.  By  building  our  organizations  to  provide  current 
intelligence,  we  are  hampering  our  ability  to  provide  warning.  To  see  the  road 
ahead,  we  must  force  ourselves  to  think  totally  opposite  from  our  custom — not  to 
see  how  fast  we  can  produce  intelligence  but  rather  how  well  we  can  produce 
intelligence.  That  message  was  clear  for  the  bipolar  world  of  the  Cold  War — the 
need  to  rethink  how  we  think  about  intelligence  is  even  more  accentuated  in  the 
multi-polar  world  of  WMD  and  terrorism. 

Warning  is  cumulative,  not  merely  current.  Intelligence  reporting  at  all 
times  must  take  care  to  insure  that  the  consumer  knows  the  cumulative 
background  and  understands  that  the  latest  indication  is  but  one  of  many 
which  in  their  totality  give  us  insight  into  what  may  occur...  The  best 
warning  analysis  is  the  product  of  a  detailed  and  continuing  review  of  all 
information,  going  back  weeks  and  months,  which  may  be  relevant  to  the 
current  situation,  and  a  solid  basic  understanding  of  the  potential 
enemy’s  objectives,  doctrines,  practices,  and  organizations...  Most  crises 
have  roots  going  deep  into  the  past,  much  farther  than  we  usually  realize 
until  after  they  erupt.  Preparation  for  war  or  possible  war  often  can  be 
traced  back  for  months  once  it  becomes  clear  that  a  real  threat  exists,  and 
pieces  of  information  which  appeared  questionable,  unreliable  or  even 
ridiculous  when  received  will  suddenly  have  great  relevance  to  the 
present  situation,  provided  that  the  analyst  has  saved  them  and  can  fit 
them  into  the  current  pattern.  Further,  information  which  is  months  old 
when  received  (and  therefore  scarcely  current  intelligence)  may  be 
immensely  valuable.  An  indication  is  not  useless  or  invalid  because  it 
occurred  months  ago  but  you  just  found  out  about  it  today;  it  may  dem¬ 
onstrate  that  the  preparations  for  conflict  have  been  far  more  extensive 
and  significant  than  you  had  believed.6 

In  the  Cold  War  warning  intelligence  required  “going  back  weeks  and 
months.”  In  the  world  of  WMD  and  terrorism  warning  intelligence  requires 
going  back  “years  and  decades.”  In  the  case  of  WMD  “preparation  for  conflict” 
often  has  started  decades  before  the  conflict — at  the  time  a  state  decides  to  begin 
building  WMD.  In  terrorism  “preparation  for  conflict”  may  have  also  started 

5Grabo,  164. 

6Grabo,  164,  5-6. 
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decades  before  the  conflict  when  a  superpower  has  gone  home  and  those  fighting 
that  power  perceived  that  it  must  have  turned  its  enmity  toward  another  foe. 


The  term  strategic  warning  somewhat  regrettably  has  no  single,  accepted 
definition.  To  those  in  the  world  of  warning  intelligence,  strategic  warn¬ 
ing  is  generally  viewed  as  relatively  long-term,  or  synonymous  with  the 
“earliest  possible  warning’'  which  the  warning  system  is  supposed  to  pro¬ 
vide.  Thus,  strategic  warning  can  be  issued  weeks  or  even  months  in 
advance...  Tactical  warning  is  much  more  easily  defined,  although  there 
is  some  shading  in  meaning.  Strictly  defined,  tactical  warning  is  not  a 
function  of  intelligence  (at  least  at  the  national  level)  but  it  is  an  opera¬ 
tional  concern.  It  is  warning  that  that  would  be  available  to  the  com¬ 
mander  on  the  front  line...”7 

But  now  everywhere  is  the  front  line.  Therefore,  I  suggest  that  we  redefine 
terms.  “Strategic”  reflects  the  need  to  mobilize  and/or  reallocate  national 
assets  between  guns  and  butter.  “Tactical”  reflects  the  response  that  can  be 
made  with  the  assets  currently  in  hand.  “Warning  is  an  intangible,  an  abstrac¬ 
tion,  a  theory,  a  deduction,  a  perception,  a  belief.  It  is  the  product  of  reasoning 
or  of  logic,  a  hypothesis  whose  validity  can  be  neither  confirmed  nor  refuted 
until  it  is  too  late.”8 

Warning  is  a  prediction  of  the  future  that  matches  past  and  current  indicators 
with  a  model  of  the  future.  Therefore,  warning  depends  very  heavily  on  models  or 
mental  images  of  what  the  world  is  and  how  it  works.  Building  models  requires 
analysis.  I  contend  that  we  must  go  one  level  beyond  Ms.  Grabo’s  premise  to  say 
that  warning  intelligence  is  really  warning  analysis.  And  the  main  goal  of  the 
warning  analyst  is  to  build  a  model  of  the  world — ourselves,  our  allies,  and  our 
adversaries — through  giving  current  intelligence  analysts  a  context  in  which  they 
may  analyze  new  reports  and  observations. 

When  we  navigate,  we  compare  our  observations  against  a  map  to  decide  the 
best  direction  to  take.  The  high-speed  “smart”  weapons  we  use  are  useless  with¬ 
out  a  highly  accurate  map  with  which  to  guide  them,  and  making  accurate  maps 
is  a  slow,  laborious  process.  Similarly,  the  high-speed  intelligence  we  provide  is 
useless  without  a  highly  accurate  “map”  of  the  adversary.  Current  intelligence 
analysts  need  an  accurate  “map,”  but  warning  analysts  are  required  to  build  and 
maintain  it. 


7  Grabo,  4. 

8  Grabo,  4. 
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This  need  for  analysis  and  building  a  conceptual  “map”  reflects  the  insights  of 
Col  John  R.  Boyd,  USAF,  whose  thoughts  on  warfighting  are  changing  the  way 
we  operate.  Col  Boyd  is  most  famous  for  his  collected  briefings,  A  Discourse  on 
Winning  and  Losing,  in  which  he  presents  and  develops  the  “observation-orienta- 
tion-decision-action  cycle.”9 

// 

■  Idea  of  fast  transients  suggests  that,  in  order  to  win,  we  should  operate  at  a 
faster  tempo  or  rhythm  than  our  adversaries — or,  better  yet,  get  inside  the 
adversary’s  Observation-Orientation- Decision-Act  ion  time  cycle  or  loop. 

■  Why?  Such  activity  will  make  us  appear  ambiguous  (unpredictable)  thereby 
generate  confusion  and  disorder  among  our  adversaries — since  our  adversaries 
will  be  unable  to  generate  mental  images  or  pictures  that  agree  with  the  men¬ 
acing  as  well  as  faster  transient  rhythm  or  patterns  they  are  competing 
against.10 

// 

Col  Boyd  recognizes  that  operations  (Decide  and  Act)  are  important  but  also 
emphasizes  the  need  for  intelligence  (Observe  and  Orient).  I  suggest  that 
Ms.Grabo’s  “warning  analysis”  and  Col  Boyd’s  “orientation”  are  merely  different 
ways  of  addressing  the  need  for  strategic  warning  by  building  conceptual  “maps” 
or  models.  Accordingly,  I  will  also  draw  heavily  on  Col  Boyd’s  exposition  of  the 
Decision  Cycle  or  OODA  Cycle  in  indicating  a  path  ahead. 

...  it  has  been  deemed  prudent  and  desirable  to  have  indications  or 
warning  specialists  who,  hopefully,  will  not  be  burdened  or  distracted 
by  the  competing  demands  placed  on  current  analysts  and  will  be  able 
to  focus  their  attention  solely  on  potential  indications  and  their  analysis 
in  depth. 

It  is  imperative  to  the  process  that  the  facts,  including  potential  or  possi¬ 
ble  facts,  and  other  indications  be  most  diligently  and  meticulously  com¬ 
piled  and  analyzed.  It  is  impossible  to  overemphasize  the  importance  of 
exhaustive  research  for  warning.  It  is  in  the  history  of  every  great  warn¬ 
ing  crisis  that  the  post-mortems  have  turned  up  numerous  relevant  facts 


9Col  John  R.  Boyd,  A  Discourse  on  Winning  and  Losing,  Collection  of  un-numbered  briefing 
slides,  August  1987.  Cited  hereafter  as  Col  Boyd. 

10  Col  Boyd.  Boyd  used  briefing  slides  in  which  what  was  presented  (or  left  out)  and  the  position 
of  the  text  on  the  slide  is  as  important  as  the  text  content.  Therefore,  whenever  a  whole  slide  of  Col 
Boyd’s  is  used,  it  will  be  indicated  by  “//  Slide  //.” 
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or  pieces  of  information  which  were  available  but  which,  for  one  reason 
or  another,  were  not  considered  in  making  assessments  at  the  time.11 

A  current  intelligence  analyst  is  a  news  reporter.  A  warning  analyst  is  much 
more  like  a  historian  or  scientist.  When  a  reporter  finds  a  story  on  a  complex  or 
highly  technical  issue,  he  or  she  finds  a  historian  or  scientist  to  provide  context. 
The  intelligence  community  needs  dedicated  warning  analysts  to  provide  that 
context. 

How  can  the  great  machinery  of  U.S.  intelligence,  which  is  capable  of 
spectacular  collection  and  analysis  on  many  subjects,  fail  to  carry  out  the 
necessary  research  in  a  warning  situation?  ...there  are  two  obvious  diffi¬ 
culties  which  arise  and  which  may  impede  the  research  effort  and  the  sur¬ 
facing  of  the  relevant  facts... 

The  intelligence  research  system  is  set  up  primarily  to  analyze  certain 
types  of  information  known  as  intelligence  “disciplines”  and  on  which 
there  is  a  more  or  less  continuing  flow  of  material...  In  a  crisis  situation, 
great  volumes  of  new  material  may  suddenly  be  poured  into  the  system. 

In  order  to  cope,  agencies  often  set  up  special  task  forces,  and  analysts 
work  overtime  in  an  attempt  to  cover  every  aspect  of  the  problem... 

When  it  is  most  needed,  communication  may  break  down  for  sheer  lack  of 
time. 

Even  more  insidious  may  be  the  less  obvious  impending  crisis,  where  the 
interrelationship  of  developments  is  not  readily  apparent,  and  particularly 
where  two  or  more  geographic  areas  may  be  involved.  In  such  cases,  the 
difficulties  of  conducting  research  are  greatly  compounded  when  items 
from  two  different  areas,  particularly  if  they  seem  relatively  obscure  or 
questionable  at  the  time,  may  not  be  brought  together  at  all. 


The  greatest  single  justification  for  the  existence  of  separate  indications 
offices  or  the  employment  of  warning  analysts  is  that  they  are  devoting 
their  full  time  to  research  in  depth  without  the  distraction  of  having  to 
fulfill  a  number  of  other  duties.  The  warning  analyst  should  never  lose 
sight  of  the  fact  that  this  is  his  raison  d’etre.  It  is  difficult  enough  to  come 
to  a  sound  warning  judgment  when  all  the  facts  have  been  considered;  it 
may  be  impossible  without  it.12 


11  Grabo,  7,  9. 

12  Grabo,  10-11,  12. 
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Warning  intelligence  requires  not  only  continual,  detailed  analysis  of  the 
adversary  but  also  detailed  knowledge  of  how  the  adversary  interacts  with  other 
nations — both  allies  and  adversaries.  In  short,  the  warning  analyst’s  first  respon¬ 
sibility  is  Orientation.  Such  detailed  knowledge  does  not  come  from  pouring 
money  or  assets  on  a  single  problem  then  moving  on  to  another  but  rather  by 
continual  attention  to  interactions  and  trends — even  when  there  is  no  crisis.  The 
Intelligence  Community  will  always  be  in  a  “crisis  management”  mode  if  it  only 
pays  attention  to  problems  after  they  have  become  crises. 

A  time-honored  military  precept,  still  quoted  with  some  frequency,  holds 
that  intelligence  should  not  estimate  the  intentions  of  the  adversary,  but 
only  his  capabilities.  Sometimes  this  has  been  extended  to  mean  that  we 
can  judge  his  capabilities  but  that  we  cannot  judge  his  intentions.13 

In  the  world  of  WMD  and  terrorism,  analyzing  capabilities  but  not  intentions 
is  not  an  option.  In  WMD  the  only  difference  between  a  non-threat  dual-use  facil¬ 
ity  and  a  threatening  dual-use  facility  is  intent.  In  some  cases  the  only  difference 
between  a  vaccine  plant  and  a  BW-agent  production  plant  is  that  a  vaccine  plant 
uses  a  vaccine  strain  microorganism  and  packages  it  in  tiny  vials  while  a  BW  pro¬ 
duction  plant  uses  a  virulent  strain  of  the  same  microorganism  and  packages  it  in 
large  warheads.  Uranium  enrichment  plants  can  provide  slightly  enriched  ura¬ 
nium  required  to  fuel  a  reactor  or  highly  enriched  uranium  to  build  a  bomb. 
Chemical  plants  can  provide  deadly  insecticides  to  kill  insects  or  deadly  chemi¬ 
cals  to  kill  humans.  And  terrorist  groups  can  potentially  exploit  benign  biological, 
chemical,  or  nuclear  facilities  to  obtain  deadly  materials  for  WMD.  In  the  age  of 
WMD  and  terrorism,  we  must  “judge  his  intentions...  Unlike  current  intelligence 
files,  good  warning  files  improve  with  age.”14 

The  more  history  we  know,  the  more  future  we  can  project.  The  more  we  know 
and  understand  how  an  adversary  acted  in  the  past  in  response  to  many  different 
problems,  the  better  we  are  able  to  “Orient”  so  that  we  can  judge  his  current 
intentions  and  his  future  actions.  Not  only  must  we  be  able  to  train  and  retain 
warning  analysts  for  the  long  haul,  but  we  also  must  be  able  to  leverage  all  the 
historical  data  in  the  many  different  IC  databases  to  capture  not  only  the  indica¬ 
tors  they  contain  but  also  the  models  and  judgments  the  warning  analysts  have 
made  based  on  that  data.  “The  ability  to  perceive  connections,  or  at  least  possible 
connections,  between  events  and  reports  which  on  the  surface  may  not  seem  to  be 
related  is  a  very  important  ingredient  in  the  warning  process,  and  one  which  has 


13  Grabo,  17. 
14Grabo,  32. 


14 


probably  been  given  too  little  attention.”15  After  9/11  it  has  become  common 
wisdom  that  we  need  to  “connect  the  dots.”  Ms.  Grabo  made  that  clear  thirty 
years  ago. 

However,  in  the  world  of  WMD  and  terrorism,  we  need  to  do  better.  Building 
models  that  merely  connect  the  dots  tells  us  what  the  connections  are  now.  In  the 
real  world,  the  connections  are  not  lines  but  rather  vectors — arrows  that  point  to 
the  future. 


If  we  want  to  assess  an  adversary’s  capabilities,  we  can  do  so  by 
“connecting  the  dots.”  If  we  want  to  assess  an  adversary’s  intentions, 
we  need  to  “orient  the  arrows.” 


Therefore,  I  suggest  that  we  need  to  reflect  on  Cynthia  Grabo’s  cogent  argu¬ 
ments  on  the  need  for  warning  intelligence  and  realize  that  her  arguments  have 
become  more  critical  as  the  world  moved  out  of  the  Cold  War  into  the  Informa¬ 
tion  Age.  We  also  need  to  reflect  on  Col  Boyd’s  OODA  Cycle  and  understand  that 
the  input  required  for  rational  decisionmaking — the  Orientation  Step — is  the 
responsibility  of  the  warning  analyst.  We  need  to  find  new  ways  to  empower  the 
warning  analyst  to  be  able  to  both  “connect  the  dots”  and  “orient  the  arrows”  to 
provide  a  well-thought-out  worldview  on  which  the  current  intelligence  analyst 
can  base  his  or  her  assessments.  BUT,  those  warning  analyses  have  to  be  ready 
before  the  crisis...  For  if  nations  or  terrorists  use  WMD  to  start  the  crisis,  by  then 
it  is  already  too  late. 

Rarely  does  the  policymaker  or  the  congressional  committee  complain  that 
intelligence  failed  to  make  an  adequate  assessment  of  enemy  capabilities,  even 
when  this  in  fact  may  have  been  the  case.  The  criticism  almost  invariably  is: 
“You  did  not  tell  me  this  was  going  to  happen.  We  were  not  led  to  expect  this 
and  were  surprised.”  Or,  “You  mean  for  all  the  millions  that  were  spent  on  col¬ 
lection,  you  were  not  able  to  tell  us  that  this  was  likely  to  occur?  ...the  Intelli¬ 
gence  Community’s  competence  often  will  be  judged  in  the  end  by  the  accuracy 
of  its  forecasts  of  what  is  likely  to  happen.  And  indeed  this  is  what  the  warning 
business  is  all  about.”16 


15  Grabo,  38. 
16Grabo,  18. 
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PROPOSITION 

New  methodologies  for  warning  intelligence  can  be  developed  based  on 
quantum  thinking  rather  than  Newtonian  thinking. 


Chapter  3 

FROM  NEWTONIAN  THINKING  TO  QUANTUM  THINKING 

Revolutions  in  Military  Affairs  (RMAs)  are  precipitated  by  new  develop¬ 
ments  in  technology  that  ultimately  change  not  only  strategies  and  opera¬ 
tions  but  organizations  as  well.  Our  current  strategies  and  organizations 
are  based  on  Industrial-age  technologies  built  by  Newtonian  thinking. 
Strategies  and  organizations  for  the  Information-Age  must  be  built  on 
quantum  thinking. 

The  object  of  science — just  like  the  object  of  intelligence — is  to  predict  the 
future. 

Newton’s  discovery  of  physical  laws  and  development  of  calculus  as  a  mathe¬ 
matical  system  to  describe  physical  systems  led  to  the  technological  revolution 
that  defined  the  Industrial  Age.  Our  ability  to  build  engineering  marvels,  be  they 
automobiles,  nuclear  weapons,  or  intercontinental  ballistic  missiles,  is  based  on 
our  ability  to  model  physical  systems  quantitatively  to  predict  what  they  will  do 
when  we  start  them  up  and  send  them  on  their  way. 

The  Newtonian  revolution  in  the  physical  sciences  has  led  to  RMAs  based  on 
the  new  engineering  prowess  that  became  possible  through  our  knowledge  of 
physics  and  chemistry.  An  Agricultural-Age  army  equipped  with  hand-built 
muskets  that  could  shoot  accurately  for  fifty  yards  could  line  up  in  formation 
just  outside  that  effective  musket  range  then  fix  bayonets,  charge  over  fixed 
positions,  and  decimate  an  immobile  opponent  before  that  opponent  could 
reload  and  kill  or  wound  enough  attackers  to  repel  the  charge.  An  Industrial- 
Age  army  was  equipped  with  mass-produced  rifled  muskets  that  could  shoot 
accurately  for  several  hundred  yards,  and  this  new  technology  revolutionized 
land  warfare.  As  Robert  E.  Lee  found  out  by  ordering  Pickett’s  Charge  at  Get¬ 
tysburg,  an  attacking  army  faced  with  the  massive  longer  range  firepower  of  an 
entrenched  Industrial-Age  opponent  would  be  decimated  long  before  it  even 
reached  the  fixed  position.  Ulysses  Grant  revolutionized  land  warfare  in  the 
Peninsula  Campaign  by  understanding  that  a  larger  better-armed  force  could 
prevail  by  throwing  assets  into  the  breach  so  that  in  the  meat  grinder  of  trench 
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warfare  the  army  that  could  bring  the  most  weapons  to  bear  for  the  longest  time 
would  prevail. 

This  paradigm  in  land  warfare  prevailed  through  World  War  I  and  was  broken 
by  the  Nazi  blitzkrieg  that  integrated  tanks,  aircraft,  and  better  communications 
into  a  new  paradigm  of  maneuver  warfare.  In  those  revolutions  and  in  that  aspect 
of  the  current  RMA  driven  by  the  development  of  missiles,  WMD,  and  smart 
bombs,  changes  in  technology  that  have  allowed  an  army  to  shoot  faster,  further, 
or  more  accurately  have  dominated  the  physical  battlefield. 

Industrial-Age  RMAs  were  based  on  Newtonian  thinking  and  the  ability  to 
harness  the  physical  world  by  being  able  to  model  physical  systems  that  had  pre¬ 
dictable  characteristics.  Industrial- Age  intelligence  developed  along  similar  lines. 
Since  an  opponent’s  ability  to  defeat  an  army  depended  mainly  on  the  numbers 
and  types  of  weapons  the  opponent  could  build  and  field,  the  most  important 
information  an  Industrial-age  analyst  could  provide  was  the  numbers,  types,  and 
locations  of  the  opponent’s  weaponry.  Industrial-Age  intelligence  analysts  were 
more  concerned  with  an  adversary’s  capabilities  than  with  his  intent. 

Industrial-Age  battlefield  dominance  was  based  on  physical  dominance — both 
in  the  ability  to  field  more  and  better  technology  than  the  opponent  and  in  the 
ability  to  know  where  his  technology  was. 

The  Newtonian  paradigm  in  science  began  to  unravel  at  the  beginning  of  the 
twentieth  century  with  the  discovery  that  energy  is  discrete  or  quantal — not  con¬ 
tinuous.  Over  the  next  century  several  areas  of  science  went  through  revolutions 
that  occurred  almost  independently  of  Newtonian  physics: 

■  Revolutions  in  quantum  physics  led  to  the  building  of  nuclear  reactors  and 
nuclear  weapons. 

■  Revolutions  in  organic  chemistry  led  to  the  plastics  and  pharmaceutical  indus¬ 
tries  and  the  building  of  chemical  weapons. 

■  Revolutions  in  biology  led  to  genetic  engineering  and  the  building  of  new 
kinds  of  biological  weapons. 

■  Revolutions  in  silicon  chemistry  led  to  the  microchip  and  the  computer 
revolution. 

While  knowledge  of  Newtonian  physics  was  critical  to  all  the  engineering  rev¬ 
olutions  of  the  Industrial  Age,  not  one  of  these  new  revolutions  was  precipitated 
by  Newtonian  physics  or  Newtonian  modeling  methods  based  on  calculus.  This  is 
because  all  are  based  on  quantum  concepts — the  fact  that  the  world  is  built  of  dis¬ 
crete  countable  objects  such  as  atoms,  molecules,  organisms,  or  electrons — rather 
than  being  continuous  as  Newton  assumed  when  he  invented  calculus. 
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I  suggest  that  quantum  science  will  change  society  in  the  Information  Age  just 
as  Newtonian  science  changed  society  in  the  Industrial  Age.  Every  paradigm  shift 
in  warfare  has  gone  through  three  stages:  (1)  a  Military  Technical  Revolution 
(MTR)  where  new  technologies  give  advantage  over  old  ones;  (2)  a  Revolution  in 
Military  Affairs  (RMA)  where  new  strategics  and  operational  concepts  fully 
exploit  the  new  technology;  and  (3)  a  Revolution  in  Military  Culture  (RMC) 
where  the  operational  concepts  and  technologies  are  integrated  into  new  kinds  of 
organizations.  The  MTR  precipitated  by  the  mass-produced  rifled  repeating  mus¬ 
ket  led  to  the  RMA  of  trench  warfare  which  led  to  an  RMC  in  which  the  military 
totally  reorganized  to  fight  that  way. 

A  journey  of  a  thousand  miles  begins  with  a  single  step. 

Chinese  Proverb 

We  are  at  the  threshold  of  a  paradigm  shift  for  the  Information  Age  precipi¬ 
tated  by  quantum  thinking  that  is  potentially  even  larger  than  the  paradigm  shift 
for  the  Industrial  Age  precipitated  by  Newtonian  thinking.  One  cannot  know 
which  way  to  take  the  first  step  on  a  thousand-mile  journey  unless  one  knows 
where  that  thousand-mile-distant  goal  is.  Similarly,  we  cannot  really  define  how 
we  should  change  our  strategies,  operational  concepts,  and  organizations  to  best 
exploit  Information- Age  technology  unless  we  can  see  beyond  the  paradigm  shift 
to  what  the  world  might  look  like  in  the  next  two  generations.  That  depends  on: 

(1)  understanding  what  a  paradigm  shift  is  and  how  a  culture  gets  beyond  it,  and 

(2)  understanding  the  fundamental  differences  between  Newtonian  thinking  and 
quantum  thinking  that  make  Newtonian  physics  and  calculus  virtually  irrelevant 
in  quantum  physics,  organic  chemistry,  biology,  and  computer  science — and, 
therefore,  virtually  irrelevant  in  the  analysis  of  the  nuclear,  chemical,  and  biolog¬ 
ical  weapons  and  computers  produced  by  the  new  paradigm. 
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Chapter  4 


PARADIGM  SHIFTS  —  WHEN  THE  FUTURE  AIN’T 
WHAT  IT  USED  TO  BE 

In  a  paradigm  shift,  one  asks  the  same  question  and  gets  a  different 
answer.  The  difference  depends  on  the  underlying  assumptions  one  makes 
about  the  world.  Therefore,  we  must  re-examine  the  assumptions  of  any 
paradigm  to  know  when  it  can  be  used  accurately. 

The  future  ain ’t  what  it  used  to  be. 

Yogi  Berra 

One  perceptive  historian,  viewing  a  classical  case  of  a  science’s  reorien¬ 
tation  by  paradigm  shift,  recently  described  it  as  “picking  up  the  other 
end  of  the  stick,”  a  process  that  involves  “handling  the  same  bundle  of 
data  as  before,  but  placing  them  in  a  new  set  of  relations  with  one  another 
by  giving  them  a  different  framework.”  Others  who  have  noted  this 
aspect  of  scientific  advance  have  emphasized  its  similarity  to  a  change  in 
visual  gestalt:  the  marks  on  paper  that  were  first  seen  as  a  bird  are  now 
seen  as  an  antelope,  or  vice  versa.  That  parallel  can  be  misleading.  Scien¬ 
tists  do  not  see  something  else:  instead  they  simply  see  it.17 

Thomas  Kuhn,  The  Structure  of  Scientific  Revolutions 

In  a  true  paradigm  shift  the  world  is  turned  on  its  head.  A  proponent  of  the  new 
paradigm  asks  the  same  question  as  a  proponent  of  the  old  paradigm,  but  gets  a 
different  answer.  An  argument  then  ensues  between  the  dueling  paradigms — with 
no  resolution  because  ultimately  paradigms  rest  on  belief  systems  that  can  never 
be  proved  or  disproved,  only  believed  or  disbelieved. 

Therefore,  bridging  the  gap  across  a  paradigm  shift  requires  changing  one’s 
beliefs  about  how  the  world  works — a  difficult  task  at  best.  This  problem  was 
rampant  when,  in  the  early  twentieth  century,  quantum  physics  began  to  over¬ 
turn  Newtonian  physics.  Werner  Heisenberg  suggested  that  the  huge  gap 
between  Newtonian  thinking  and  quantum  thinking  could  be  spanned  using 
Niels  Bohr’s  principle  of  complementarity.  But  Bohr’s  principle  was  designed 
to  reconcile  Newtonian  mechanics  with  relativity  and  quantum  theories — 
which  most  of  us  find  rather  strange  if  not  totally  incomprehensible.  Therefore, 


17Thomas  Kuhn,  The  Structure  of  Scientific  Revolutions  (Chicago,  IL:  University  of  Chicago 
Press,  1996),  85.  Cited  hereafter  as  Kuhn. 
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if  we  are  to  use  the  complementarity  principle  to  best  effect,  we  need  to  use  it 
on  more  familiar  paradigms. 

Let  me  explain  what  a  paradigm  shift  is  and  how  the  complementarity  princi¬ 
ple  can  help  us  understand  it  by  a  more  familiar  example. 

Fill  in  the  blank. 

The  shortest  distance  between  two  points  is  a _ . 

Now  on  the  diagram  below ,  draw  the  path  that  describes  the  shortest  distance 
between  point  N  and  M. 


Unless  you  read  ahead,  I  can  virtually  guarantee  that  you  filled  in  the  blank 
with  straight  line  and  your  drawing  looked  like  this. 
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Now  on  the  map  below,  draw  the  direction  that  during  the  Cold  War  the  Air 
Force  aimed  their  missiles  to  take  the  shortest  distance  between  a  silo  in  North 
Dakota  and  a  target  near  Moscow. 


Your  answer  probably  looks  something  like  this. 


How  was  it  that  by  merely  re-labeling  N  and  M  to  North  Dakota  and  Moscow 
that  the  direction  of  the  path  went  from  directly  East  to  directly  North? 

Of  course  the  answer  is  simple.  On  the  earth  the  shortest  distance  between  two 
points  is  a  great  circle — not  a  straight  line. 
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And  you’re  thinking  that  the  first 
question  was  a  trick  question.  How 
was  it  a  trick  question?  We  have  just 
been  so  used  to  doing  geometry  on  a 
plane — the  Euclidian  paradigm — 
that  we  virtually  never  think  to  do 
geometry  on  a  sphere — a  non- 
Euclidian  paradigm. 

On  the  other  hand,  you  can  get  to 
Moscow  from  North  Dakota  by 
going  directly  east.  It  is  a  pathway 
and  it  does  get  you  there — only  it  is 


The  direction  you 
take  depen  ds  on 
your  assumptions 
about  the  world. 


just  aimed  his  missile  in  the  wrong  direction. 


not  the  shortest  path.  So  if  the  earth 
was  as  flat  as  our  usual  Mercator 
map  depiction  of  it,  the  East 
answer  is  the  correct  one. 

Both  the  great  circle  and 
straight-line  paradigms  get  a  cor¬ 
rect  answer  in  their  own  reference 
frames.  So  to  a  proponent  of  the 
straight-line  paradigm,  the  North 
path  is  wrong.  And  when  the  pro¬ 
ponent  of  the  great  circle  paradigm 
aims  his  missile  north,  the  straight- 
line  proponent  shakes  his  head  and 
wonders  why  the  other  proponent 


On  the  other  hand  the  great-circle  proponent  sees  the  most  direct  route  because 
he  sees  the  world  in  a  different  way. 


Also,  there  is  no  compromise  position.  Either  the  East  or  the  North  path  will, 
in  fact,  get  to  Moscow,  but  any  compromise  direction  will  miss. 

Furthermore,  if  the  straight-line  proponent  offered  to  compare  the  paradigms 
using  a  much  more  controlled  experiment,  such  as  the  direction  from  Washing¬ 
ton  to  Baltimore  or  New  York  to  Boston,  both  paradigms  get  virtually  the  same 
answer.  (This  is  why  mariners  and  pilots  use  the  flat  earth  Mercator  projection 
for  all  but  the  longest  sea  voyages  or  intercontinental  flights).  So,  the  straight- 
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line  proponent  is  likely  to  say,  “why  should  I  even  bother  learning  your  great 
circle  paradigm,  when,  in  the  cases  that  matter,  I  cannot  tell  the  difference 
between  the  two?” 

In  fact,  we  use  a  straight-line  flat  earth  paradigm  most  of  the  time  anyway, 
even  though  we  know  the  earth  is  round.  Have  you  ever  put  a  globe  in  the  glove 
compartment  of  your  car? 

In  paradigm  shifts:  (1)  one  asks  the  same  questions  but  gets  different  answers; 
(2)  the  differences  depend  on  basic  fundamental  beliefs  that  cannot  be  proved  or 
disproved  in  either  paradigm;  (3)  there  are  no  compromise  answers  for  situations 
where  the  assumptions  of  the  two  paradigms  are  at  odds;  and  (4),  the  two  para¬ 
digms  give  the  same  answers  in  situations  where  the  assumptions  of  the  old  para¬ 
digm  approximate  those  of  the  new. 

Heisenberg  indicated  that  there  can 
be  no  grounds  for  reconciliation 
between  paradigms  until  both  para¬ 
digms  are  developed  enough  to  get  to 
step  (4),  which  is  the  complementarity 
principle.  More  simply  stated,  the 
complementarity  principle  is  the  idea 
that  models  in  two  different  paradigms 
give  the  same  answer  only  under  con¬ 
ditions  where  the  assumptions  of  both 
paradigms  are  comparable.  When  one 
goes  from  New  York  to  Boston,  the 
shape  of  the  earthly  sphere  in  that 
small  region  is  almost  a  plane  so  that  a 
globe  and  a  flat  map  are  almost  indis¬ 
tinguishable.  It  is  only  when  we  know  enough  about  geometry  on  both  planes  and 
spheres  to  be  able  to  see  that  plane  geometry  is  a  limiting  case  contained  within 
non-planar  geometry  that  we  can  be  comfortable  living  with  both  paradigms.  We 
can  look  at  the  chart  on  the  right  and  believe  that  the  great  circle  route  is  actually 
shorter  than  the  loxodrome  (course  of  constant  direction)  only  because  we  know 
that  plane  geometry  (the  Mercator  projection)  works  well  only  for  small  charts 
where  the  surface  of  the  sphere  is  approximately  the  same  as  a  plane.  Therefore, 
we  are  comfortable  using  maps,  and  we  don’t  try  fitting  a  globe  in  our  glove  com¬ 
partment  and  leave  great  circles  for  the  Air  Force,  pilots  on  intercontinental 
flights,  and  mariners. 

In  a  paradigm  shift,  ideas  we  held  dear — sometimes  even  ideas  that  we  consid¬ 
ered  “facts” — all  of  a  sudden  are  either  wrong  or  only  work  under  particular  con- 
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ditions.  Consider  the  following  paradigm  shifts,  and  note  how  we  have  always 
asked  the  same  question  but  sometimes  we  get  a  different  answer.  This  does  not 
necessarily  totally  overturn  the  old  paradigm  but  limits  its  applicability.  The  com¬ 
plementarity  principle  allows  us  to  see  how  the  limiting  old  paradigm  is  con¬ 
tained  within  and  complementary  to  the  new  paradigm.  It  is  only  by  using  the 
complementarity  principle  that  we  can  comfortably  use  both  the  old  and  the  new 
paradigm. 

Old:  The  earth  is  flat. 

New:  The  earth  is  round. 

Complementarity  Condition:  When  the  area  represented  on  a  chart  is 
small  enough  to  approximate  the  portion  of  the  sphere  as  a  plane,  a  map 
is  almost  as  accurate  as  a  globe. 

Old:  The  sun  revolves  around  the  earth. 

New:  The  earth  revolves  around  the  sun. 

Complementarity  Condition:  When  observing  the  heavens  by  eye,  the 
epicycles  of  Ptolemy  provide  calculations  that  are  almost  the  same  as 
those  using  the  methods  of  Copernicus  and  Keppler. 

Old:  Atoms  are  indivisible. 

New:  Atoms  are  divisible. 

Complementarity  Condition:  See  Bohr  and  Heisenberg... 

Therefore,  in  understanding  any  paradigm  shift,  one  must  go  back  to  the 
underlying  assumptions  of  both  the  old  and  new  paradigms  to  understand  how  the 
new  paradigm  can  provide  useful  answers  where  the  old  one  is  limited  by  its 
assumptions.  And  we  can  only  be  comfortable  when  we  can  see  where  they  show 
complementarity.  As  Kuhn  indicated,  “The  decision  to  reject  one  paradigm  is 
always  simultaneously  the  decision  to  accept  another,  and  the  judgment  leading 
to  that  decision  involves  the  comparison  of  the  paradigms  with  nature  and  with 
each  other.”18 

In  science  our  knowledge  of  the  world  depends  on  our  ability  to  model  it  in 
terms  of  a  paradigm  that  supports  observations  and  allows  testable  experiments 
from  them.  In  intelligence  our  knowledge  of  the  world — or  our  orientation — 
depends  on  our  ability  to  understand  it  in  a  way  that  can  support  observations  and 
reports  and  allow  actionable  decisions  from  them. 


18Kuhn,  77. 


26 


In  the  Industrial  Age  we  based  our  thinking  about  intelligence — directly  or 
indirectly  because  of  what  we  learned  in  school — on  Newtonian  scientific  meth¬ 
ods.  If  Newtonian  science  is  irrelevant  for  modeling  nuclear  physics,  organic 
chemistry,  biology,  and  computer  science,  then  the  answers  we  get  by  Newtonian 
methods  to  questions  in  those  fields  will  also  be  irrelevant.  More  importantly, 
human  organizations  and  cultures  are  biological,  and  if  we  are  going  to  model 
them  in  an  actionable  way,  we  need  to  forget  Newton  and  build  a  New  Science 
based  on  quantum  principles. 

// 


ILLUMINATION 

■  The  previous  discussion  assumes  interaction  with  both  the  external  and  inter¬ 
nal  environment.  Now,  let  us  assume,  for  whatever  reason  or  combination  of 
circumstances,  that  we  design  a  command  and  control  system  that  hinders 
interaction  with  the  external  environment.  This  implies  a  focus  inward,  rather 
than  outward. 

■  Picking  up  from  this  idea,  we  observe  from  Darwin  that: 

□  The  environment  selects. 

□  Ability  or  inability  to  interact  and  adapt  to  exigencies  of  environment 
select  one  in  or  out. 

■  Furthermore,  according  to  the  Godel  Proof,  the  Heisenberg  Uncertainty  Princi¬ 
ple,  and  the  Second  Law  of  Thermodynamics: 

□  One  cannot  determine  the  character  or  nature  of  a  system  within  itself. 

□  Moreover,  attempts  to  do  so  lead  to  confusion  and  disorder.  Why? 
Because  in  the  “real  world”  the  environment  intrudes  (my  view). 

■  Now,  by  applying  the  ideas  of  Darwin,  the  Second  Law,  Heisenberg,  and 
Godel  to  Clausewitz  one  can  see  that: 

He  who  can  generate  many  non-cooperative  centers  of  gravity  magni¬ 
fies  friction.  Why?  Many  non-cooperative  centers  of  gravity  within  a 
system  restrict  interaction  and  adaptability  of  a  system  with  its  sur¬ 
roundings,  thereby  leading  to  a  focus  inward  (i.e.,  within  itself), 
which  in  turn  generates  confusion  and  disorder,  which  impedes  vigor¬ 
ous  or  directed  activity,  hence,  by  definition,  magnifies  friction  or 
entropy. 19 

// 


19Col  Boyd. 
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Chapter  5 


FROM  NEWTONIAN  ANALOG  MODELS  TO 
QUANTUM  DIGITAL  MODELS 

The  core  assumption  of  Newtonian  calculus  is  that  the  world  is  continu¬ 
ous  and  single-valued.  The  real  world  is,  however,  demonstrably  digital 
and  multi-state.  Any  kind  of  model  we  use  to  describe  the  world  returns 
answers  that  are  directly  dependent  on  its  underlying  core  assumptions. 
An  examination  of  the  mismatch  of  Newtonian  models  with  real-world 
systems — especially  biological  systems  that  include  human  organiza¬ 
tions,  cultures,  and  tools — indicates  that  several  Newtonian  assumptions 
we  currently  use  to  analyze  those  systems  ’functions  provide  misleading 
and/or  incomplete  assessments.  This  analysis  also  points  toward  the 
basis  of  a  New  Science  based  on  quantum  methods,  which  assume  that 
the  world  is  digital  and  multi-state. 


Integral  and  differential  calculus  is  based  totally  on  the  assumptions  that  math¬ 
ematical  functions  can  be  described  by  lines  that  can  be  subdivided  into  smaller 
and  smaller  pieces  ad  infinitum  (that  is,  continuous  or  analog)  and  that  there  is 
one  and  only  one  value  of  y  for  every  x  (that  is,  single- valued).  In  real-world 
functions  when  one  subdivides  the  line  far  enough  it  becomes  a  series  of  uncon¬ 
nected  dots  (digital)  and  there  can  be  multiple  values  of  y  for  each  x  (multi-state). 
This  seemingly  small  distinction  in  our  mathematical  formalism  used  to  model 
the  world  has  enormous  implications  for  how  our  models  work  and  when  they 
become  irrelevant.  To  model  the  world  for  the  Information-Age  we  must  rely  on  a 
New  Science  that  reflects  the  digital  and  multi-state  nature  of  the  world. 
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Let  me  explain  by  comparing  the  Newtonian  paradigm  with  the  required  para¬ 
digm  for  the  New  Science  using  conditions  in  which  the  two  show  complementa¬ 
rity.  This  complementarity  is  very  important  here  because  using  the  Newtonian 
paradigm  outside  these  limited  complementarity  conditions  will  give  incomplete 
or  misleading  answers. 

Although  this  is  a  discussion  of  the  scientific  basis  by  which  we  model  and 
analyze  the  world,  I  will  use  examples  where  possible  from  descriptions  of  navi¬ 
gation  or  familial-  technologies  directly  applicable  to  intelligence  analysis.  Being 
able  to  understand  and  model  navigation  is  crucial  to  accommodating  the  New 
Science  and  extending  it  to  a  new  logical  and  computational  method  for  intelli¬ 
gence  analysis  and  assessment  because:  (1)  the  targets  we  model — be  they  weap¬ 
ons  of  mass  destruction  or  the  organizations  that  build  and  employ  them — need  to 
use  navigational  methods  to  function,  and  (2)  we  also  are  navigating  when  we  do 
such  an  analysis. 

// 


ILLUMINATION 

■  Orientation  is  the  schwerpunkt.  It  shapes  the  way  we  interact  with  the  environ¬ 
ment — hence  orientation  shapes  the  way  we  obsen>e,  the  way  we  decide ,  the 
way  we  act. 

In  this  sense 

■  Orientation  shapes  the  character  of  present  observation-orientation-deci- 
sion-action  loops — while  these  present  loops  shape  the  character  of  future 
orientation. 


IMPLICATION 

■  We  need  to  create  mental  images,  views,  or  impressions,  hence  patterns  that 
match  the  activity  of  the  world. 

■  We  need  to  deny  our  adversary  the  possibility  of  uncovering  or  discerning  pat¬ 
terns  that  match  our  activity,  or  other  aspects  of  the  reality  of  the  world.20 

// 


20Col  Boyd. 
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From  Bigger,  Faster  Technology  to 
Smarter  Thinking:  History  Matters  I 

Newtonian  Assumption:  A  continuous  function  describing  two  point-like 
objects  can  predict  the  future  on  the  basis  of  a  single  observation. 

New  Science  Assumption:  A  digital  model  of  real  objects  with  definable  struc¬ 
ture  can  predict  the  future  on  the  basis  of  a  history  of  observations  in  multiple 
dimensions. 

Complementarity  Condition:  When  enough  data  points  have  been  collected, 
one  can  build  a  model  or  function  that  can  predict  the  future  with  no  additional 
data  points. 

Example:  Given  the  object  observed  on  the  radarscope,  predict  its  future 
course  and  speed  relative  to  the  object  in  the  center. 

Newtonian  thinking  says  that  if  I  have  a  mathematical  function  that  describes 
the  interaction  of  two  point-like  objects,  I  can  use  that  function  to  predict  their 
future  position  and  momentum.  Unfortunately,  if  you  don’t  already  have  the 
function,  things  can  be  rather  difficult.  The  Newtonian  model  works  best  for  the 
movements  of  planets,  so  that  the  blips  on  the  “radarscope”  could  represent  the 
earth  and  moon.  In  that  case  the  plot  would  look  something  like  this.  If  we 
already  know  the  exact  position  and  momentum  (course  and  speed)  of  the  moon 
plus  the  masses  of  both  the  earth  and  the  moon  we  can  predict  the  path  of  the 
moon  very  far  into  the  future. 


However,  if  we  examine  this 
a  bit  deeper,  we  can  see  that 
many  years  worth  of  observa¬ 
tions  were  required  (by  Tycho 
Brahe)  of  planetary  motions 
before  Johannes  Kepler  could 
fit  them  to  a  curve  that 
described  the  orbits  in  terms  of 
Newton’s  Law’s  of  motion  and 
gravitational  interaction.  But  in  real-world  situations,  the  warfighter  or  intelli¬ 
gence  analyst  does  not  have  the  luxury  of  collecting  all  that  data  and  saying, 
“Now  I  can  predict  the  future  without  any  more  observations  merely  on  the  basis 
of  my  mathematical  functions.”  What  we  forget  is  that  the  degree  of  determinism 
that  went  into  the  initial  conditions  accounts  for  multiple  observations. 

Let’s  return  to  our  real-world  radarscope  and  define  all  the  things  we  need  to 
observe  before  we  can  predict  the  future  motion  of  our  radar  blip.  On  the  screen 
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right  now  we  have  a  position  (potentially  Lat  and  Lon) 
for  our  own  ship  in  the  center  and  a  position  for  the  tar¬ 
get  (in  the  form  of  a  bearing  and  range).  We  have  four 
data  bits  on  two  point-like  objects  but  not  enough  data 
to  determine  a  course  and  speed.  Of  course.  Heisen¬ 
berg’s  Uncertainty  Principle  in  quantum  physics  stated 
that  one  cannot  determine  the  position  plus  the  momen¬ 
tum  (the  scientist’s  way  of  saying  position  plus  course 
and  speed)  in  a  single  experiment.  And  every  sailor, 
pilot,  or  artillery  spotter  who  has  ever  tried  to  track  a 
target  by  radar  knows  that  the  real  world  follows 
Heisenberg  not  Newton. 

So  let’s  wait  a  bit  and  get  another  look  at  our  radar- 
scope.  After  three  minutes  the  scope  looks  like  this. 
What  is  the  course  and  speed  of  the  target?  There’s  still 
not  enough  data  by  the  Newtonian  method  because  we 
don’t  have  a  function  to  calculate. 

Of  course,  any  sailor,  pilot,  or  artillery  spotter  can  tell 
that  you  do  have  enough  data  to  solve  for  the  target’s 
course  and  speed — but  of  course  you’ve  got  to  be  smart 
enough  to  save  the  historical  data.  And  the  savvy  opera¬ 
tor  had  already  marked  the  first  position  on  the  radar- 
scope  with  a  grease  pencil  so  his  scope  looks  like  this. 
The  two  points  define  two  positions  and  simple  math 
will  tell  us  that  velocity  =  [(position  2)-(position  1)]  / 
[(time  2)-(time  1)]  or  v  =  A  (position)/A  (time). 

By  now  another  three  minutes  have  passed  and 
there’s  another  blip  to  add  on  the  scope.  By  lining  up  the 
three  dots — one  from  the  present  and  two  historical  ones 
plotted  in  grease  pencil — the  operator  can  read  off  a 
course.  Then  by  measuring  the  distance  the  blip  moved 


in  the  six  minutes  using  the  range  scale  of  his  scope  and  dividing  by  the  0. 1  hour 


(=  six  minutes)  he  can  compute  the  speed. 


But  what  is  the  target’s  position?  In  the  time  that  it  took  to  do  the  measure¬ 
ments  and  calculations,  the  target  moved.  But  by  using  the  simple  function  now 
determined  graphically  with  the  grease  pencil,  the  operator  can  extend  the 
arrow  forward  and  predict  where  the  target  will  be  in  three  more  minutes.  And 
how  confident  is  the  operator  of  his  assessment?  It  depends  on  how  much  his¬ 
tory  he  has  available. 
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Examine  the  two  plots  to  the 
left  and  decide  which  one  gives 
you  the  best  estimate  of  where  the 
target  will  be  three  minutes  from 
your  last  observation.  In  a  real 
world  plot  with  data  scatter,  the 
larger  period  of  history  it  covers 
the  more  accurate  the  result  is — if 
the  target  has  not  decided  to  change  course  and/or  speed. 

In  Newtonian  thinking  all  functions  are  equally  useful  because  they  can  be  cal¬ 
culated  forward  and  backward  in  time  with  equal  accuracy.  Note  that  when  you 
take  the  entire  history,  you  can  get  a  very  accurate  estimate  of  the  course  and 
speed  but  you  can  only  equate  that  computation  in  conjunction  with  an  average 
position  that  is  somewhere  spread  over  the  entire  track  you  have  measured. 

From  this  simple  difference  in  assumptions,  we  operate 
very  differently. 

Cold  War  Targeting:  The  key  player  on  the  battlefield 
is  the  guy  with  his  finger  on  the  ICBM  launch  button.  The 
Newtonian  Revolution  enabled  the  physical  sciences.  Tech¬ 
nological  superiority  based  on  the  physical  sciences  meant 
weapons  that  could  go  farther  or  faster  or  cany  a  bigger 
boom.  Therefore,  the  missile  officer  in  the  North  Dakota 
silo  or  the  B-52  pilot  was  the  key  player  on  the  battlefield. 

History  did  not  matter;  solving  the  course  and  speed  did 
not  matter.  If  you  can  deliver  nuclear  ordnance  on  target 
anywhere  in  the  world  in  fifteen  minutes,  all  you  need  to 
know  is  what  the  opponent  is  doing  now.  Imagery  Intelli¬ 
gence  (IMINT)  and  Measurement  and  Signature  Intelli¬ 
gence  (MASINT)  are  the  keys  to  Industrial- Age  targeting. 

Afghan  War  Targeting:  The  key  player  on  the  battle¬ 
field  is  the  guy  on  horseback  with  the  binoculars,  GPS,  and  laser-pointer.  In  the 
Information  Age  the  more  accurately  one  can  determine  where  the  opponent  is 
and  what  he  will  do,  the  more  precisely  one  can  target  the  opponent.  Afghanistan 
showed  that  a  person  on  the  ground  is  far  superior  in  determining  the  location  of 
an  opponent  and  tracking  his  intentions  than  all  the  high-tech  remote-sensing 
devices — mainly  for  his  ability  to  loiter  and  maintain  a  history  of  the  opponent — 
and  determining  his  location  and  intentions.  A  smart  bomb  is  only  as  smart  as  the 
spotter  or  analyst  who  determines  target  PIM  (position  and  intended  movement). 
HUMINT  is  the  key  to  Information- age  targeting. 
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The  take-home  message  here  is  that  the  idea  of  an  exact  mathematical  function 
that  can  tell  you  everything  you  need  to  know  about  the  future  of  even  a  simple 
point-like  object  based  on  a  single  observation  is  a  classroom  dream  based  on  a 
Newtonian  model  of  the  world.  In  the  real  world — History  Matters!  The  quan¬ 
tum  reality  of  the  Heisenberg  Uncertainty  Principle  applies  and: 

■  You  need  a  historical  record  of  observations  to  be  able  to  assess  a  target’s 
motion.  You  cannot  tell  where  something  is  going  unless  you  know  where  it 
came  from. 

■  If  it  moves  faster  or  goes  farther,  you  will  be  able  to  assess  its  course  and  speed 
more  accurately  but  you  will  be  able  to  assess  its  position  less  accurately  (just 
as  Heisenberg  said). 

In  the  Industrial  Age,  IMINT  and  MASINT  were  critical  for  targeting,  and 
analysis  did  not  really  matter — only  how  fast  you  can  turn  your  observation  of 
what  is  happening  now  into  action.  In  the  Information-Age  HUMINT  plus 
selected  Industrial-Age  legacy  weapons,  will  be  critical  for  targeting,  and  analy¬ 
sis  of  the  historical  record  is  crucial  to  understand  the  opponent’s  intentions  and 
future  actions. 

// 


SAMPLES  FROM  HISTORICAL  ENVIRONMENT 

■  Sun  Tzu  (around  400  BC) 

Probe  enemy  to  unmask  his  strengths,  weaknesses,  patterns  or  movement  and 
intentions.  Shape  enemy’s  perception  of  world  to  manipulate/undermine  his 
plans  and  actions.  Employ  Cheng/Ch’I  maneuvers  to  quickly  and  unexpect¬ 
edly  hurl  strength  against  weakness. 

■  Napoleon  (early  1800s) 

“Strategy  is  the  art  of  making  use  of  time  and  space.  I  am  less  chary  of  the  lat¬ 
ter  than  the  former.  Space  we  can  recover,  time  never.  ...I  may  lose  a  battle,  but 
I  shall  never  lose  a  minute.  The  whole  art  of  war  consists  in  a  well  reasoned 
and  circumspect  defensive,  followed  by  an  audacious  attack.” 

■  N.B.  Forrest  (1860s) 

“Git  thar  the  fustest  with  the  mostest.” 

■  Blumetritt  (1947) 

“The  entire  operational  and  tactical  leadership  method  hinged  upon  ...rapid 
concise  assessment  of  situations, ...quick  decisions  and  quick  execution,  on  the 
principle:  ‘each  minute  ahead  of  the  enemy  is  an  advantage.’” 

■  Balck  (1980) 

Emphasis  on  creation  of  implicit  connections  or  bonds  based  upon  trust,  not 
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mistrust,  yet  that  permit  wide  freedom  for  subordinates  to  exercise  imagination 
and  initiative — yet,  harmonize  within  intent  of  superior  commanders.  Benefit: 
internal  simplicity  that  permits  rapid  adaptability. 

■  Yours  Truly 

Operate  inside  the  adversary’s  observation-orientation-decision-action  loops  to 
enmesh  adversary  in  a  world  of  uncertainty,  doubt,  mistrust,  confusion,  disor¬ 
der,  fear,  panic  chaos,  ...and/or  fold  adversary  back  inside  himself  so  that  he 
cannot  cope  with  events/efforts  as  they  unfold.21 
// 

Thinking  in  time  is  as  important  as  thinking  in  space.  Col  Boyd  make  this  mes¬ 
sage  very  clear  on  three  levels:  (1)  history  matters — we  can  learn  from  the  strate¬ 
gic  thinking  of  analysts  all  the  way  back  to  Sun  Tzu;  (2)  the  best  military  thinkers 
talked  processes  over  objects;  and  (2)  the  OODA  Cycle  exists  in  time,  not  space. 

From  Fighting  against  Technologies  to  Out- Thinking  Decisionmakers: 

History  Matters  II 

Newtonian  Assumption:  The  world  is  single-valued. 

New  Science  Assumption:  The  world  is  multi-state. 

Complementarity  Condition:  Where  the  system  being  modeled  is  very  far  from 
a  decision  (bifurcation)  point,  one  can  use  the  Newtonian  single- valued  model. 

Example:  An  air  conditioner  thermostat  is  set  at  70  degrees.  For  stable  control 
and  to  ensure  it  is  not 
constantly  cycling  ON 
and  OFF,  the  thermo¬ 
stat  will  turn  the  air 
conditioner  ON  when 
the  temperature  rises  to 
71  degrees  and  turn  it 
off  when  it  has  cooled 
the  room  to  69  degrees. 

I  have  two  photo¬ 
graphs  of  the  thermo¬ 
stat:  one  that  I  just  took 
that  shows  a  tempera¬ 
ture  reading  of  70 


21  Col  Boyd. 
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degrees  and  one  I  took  six  minutes  ago  that  shows  the  temperature  at  71  degrees. 
Is  the  air  conditioner  ON  or  OFF? 

This  is  a  problem  that  is  totally  unsolvable  in  the  Newtonian  paradigm  which 
depends  on  instantaneous  information  to  calculate  its  functions — and  at  70 
degrees  the  air  conditioner  can  be  either  ON  or  OFF  dependent  on  its  history.  The 
Newtonian  paradigm  will  give  a  proper  answer  if  the  temperature  is  above  71 
degrees  (always  ON)  or  below  69  degrees  (always  OFF)  because  at  those  temper¬ 
atures  there  is  only  one  solution.  Flowever,  within  the  controlling  “dead-hand” 
between  69  and  71  degrees,  no  answer  is  possible  by  Newtonian  methods  because 
there  are  two  correct  answers:  the  air  conditioner  is  ON  if  it  was  above  71  degrees 
a  few  minutes  ago  and  it’s  cooling  the  room,  or  the  air  conditioner  is  OFF  if  it 
was  below  69  degrees  a  few  minutes  age  and  the  room  is  wanning  up  for  the  next 
cooling  cycle.  In  the  New  Science  the  answer  is  ON  because  it  appears  to  be  on 
the  cooling  cycle  based  on  the  historical  observation.  Therefore,  to  describe  a 
multi-state  system — one  that  is  capable  of  making  decisions — Newtonian  meth¬ 
ods  work  only  when  the  decision  already  has  been  irreversibly  made.  And  even  in 
the  New  Science,  one  will  require  a  history  of  events  to  determine  which  of  the 
multiple  states  the  system  is  in  now. 

Unfortunately,  it’s  even  more  complicated  than  that.  The  two  photos  show  that 
the  air  conditioner  is  ON  because  it  appears  to  be  on  the  cooling  cycle.  Flowever, 
that  assumes  that  the  length  of  the  cooling  cycle  is  more  than  six  minutes;  if  the 
cooling  cycle  is  only  three  minutes  the  first  picture  could  have  been  taken  right  at 
the  beginning  of  a  cooling  cycle  and  the  second  could  have  been  taken  after  the 
air  conditioner  was  OFF  and  the  temperature  drifted  back  up  to  70  degrees.  To  get 
a  correct  answer,  even  in  the  New  Science,  one  will  need  enough  pictures  taken 
over  at  least  three  cycles  to  be  confident  in  knowing  what  the  cooling  cycle  length 
is. ..which  will  also  will  be  different  if  the  temperature  outdoors  is  85  degrees  or 
110  degrees.  Flistory  matters  even  more. 

Cold  War  Targeting:  Shoot  them  all,  and  you’ll  get  the  one  you  want.  With 
weaponry  that  could  shoot  faster  and  farther  and  with  a  bigger  boom,  the  advan¬ 
tage  was  always  with  the  side  that  shot  first.  In  the  Industrial-Age,  pre-emptive 
strike  was  always  the  best  answer.  Therefore,  intelligence  was  set  to  be  very 
generic  because  fast  reaction  was  key,  and  the  old  saying  goes  “nukes  mean  never 
having  to  say  you’ve  missed.”  Therefore,  the  missile  officer  did  not  need  to  know 
anything  more  than,  “If  I  get  the  order,  I  push  the  button,  and  a  city  disappears.” 

Afghan  War  Targeting:  Only  shoot  the  ones  who  have  decided  to  shoot  you. 
In  the  Information  Age,  one  needs  to  know  more  about  an  opponent.  In  Afghan¬ 
istan  it  was  not  a  viable  strategy  to  shoot  anyone  carrying  a  gun  because  every¬ 
one  in  Afghanistan  carries  a  gun,  or  even  to  shoot  at  anyone  who’s  shooting 
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because  they’re  not  always  shooting  at  you.  No  simple  “If  X  then  Y”  Newtonian 
rules  are  possible  when  party  goers  at  a  wedding  will  shoot  guns  in  the  air  that 
appear  at  first  glance  like  Taliban  gunfire.  One  needs  to  model  the  decisionmak¬ 
ers  to  know  which  state  they’re  in  before  firing:  the  “shooting  in  the  air  at  a  wed¬ 
ding”  state,  or  the  “shooting  at  incoming  aircraft”  state — and  that  kind  of 
knowledge  requires  history.  In  the  Information  Age,  proportional  and  logical 
response  must  be  the  norm. 

Intelligence  analysts  are  expected  to  predict  future  events  and  trends  based  on 
observations  of  the  world.  Biological  systems — be  they  individual  organisms  like 
bacteria  or  humans  or  collections  of  organisms  like  countries  or  even  the  tools 
constructed  by  human  organisms — make  decisions  and  control  their  own  behav¬ 
ior  in  response  to  their  environment.  In  our  simple  example,  we  require  at  least 
three  control  cycles  worth  of  data  (dependent  on  today’s  outdoor  temperature) 
plus  two  additional  photographs  to  confidently  assess  whether  the  air  conditioner 
is  ON  or  OFF.  And  that  is  for  a  single  thermostat,  which  can  only  turn  ON  or  OFF 
in  response  to  a  single-input  temperature  sensor. 

The  take-home  message  here  is  that  decisionmaking  systems — as  simple  as 
thermostats  or  as  complex  as  states  building  WMD — are  multi-state  and  cannot 
be  calculated  in  the  Newtonian  paradigm  unless  they  are  far  enough  away  from 
the  particular  set  of  conditions  that  will  trigger  the  decision.  The  New  Science 
must,  therefore,  account  for  systems  that  can  exist  in  different  states  under  differ¬ 
ent  conditions.  One  cannot  predict  what  a  system  will  do  unless  one  knows  what 
it  did  in  the  past.  And  once  again — Flistory  Matters!  The  New  Science  must  be 
able  to  model  the  decisionmaking  process. 

Industrial-Age  intelligence  was  based  on  Newtonian  models  that  totally 
ignored  decisionmaking.  Therefore,  there  was  only  one  best  strategy — pre¬ 
emptive  strike — for  any  adversary  because  the  adversary’s  decisionmaking  pro¬ 
cess  was  not  even  considered  in  defining  policy,  and  winning  was  only  depen¬ 
dent  on  our  own  decisions  and  actions. 

Information-Age  intelligence  must  be  based  on  quantum  models  that  can 
account  for  the  adversary’s  decisionmaking  process.  Since  an  adversary’s  “state” 
depends  not  only  on  what  he  is  trying  to  accomplish  but  also  where  he  is  in  that 
decision  loop;  the  Information- Age  analyst  must  be  able  to  provide  different 
options  that  depend  on  the  adversary’s  different  “states”  as  well  as  an  estimate  of 
which  “state”  he  is  currently  in — and  hopefully  an  estimate  of  which  state  we 
would  like  to  push  him  into. 
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MESSAGE 

■  Suppress  tendency  to  build-up  explicit  internal  arrangements  that  hinder  inter¬ 
action  with  the  external  world. 

Instead 

■  Arrange  settings  and  circumstances  so  that  leaders  and  subordinates  alike  are 
given  opportunity  to  continuously  interact  with  external  world,  and  each  other, 
in  order  to  more  quickly  make  many-sided  implicit  cross-referencing  projec¬ 
tions,  empathies,  correlations,  and  rejections  as  well  as  create  the  similar 
images  or  impressions,  hence  a  similar  implicit  orientation,  needed  to  form  an 
organic  whole. 

Why? 

■  A  similar  implicit  orientation  for  commanders  and  subordinates  alike  will 
allow  them  to: 

□  Diminish  their  friction  and  reduce  time,  thereby  permit  them  to: 

□  Exploit  variety/rapidity  while  maintaining  harmony/initiative,  thereby 
permit  them  to: 

□  Get  inside  the  adversary’s  O-O-D-A  loops,  thereby: 

□  Magnify  adversary’s  friction,  and  stretch-out  his  time  (for  a  favorable  mis¬ 

match  in  friction  and  time),  thereby: 

□  Deny  the  adversary  the  opportunity  to  cope  with  events/efforts  as  they 
unfold.22 

// 

The  Newtonian  paradigm  only  deals  with  the  physical  world.  The  New  Sci¬ 
ence  must  deal  with  the  conceptual  world.  Even  as  simple  a  control  system  as  a 
thermostat  uses  an  OODA  Cycle  to  Observe  the  world,  Orient  against  its  inter¬ 
nal  model  whether  that  world  is  too  hot  or  cold  enough.  Decide  whether  the  air 
conditioner  should  be  ON  or  OFF,  and  Act  to  ensure  that  it  is  in  the  proper 
state.  Therefore,  we  need  not  only  to  understand  the  adversary’s  OODA  Cycle 
but  our  own  as  well  before  we  can  provide  the  proper  orientation  to  make  the 
best  decision. 


22Col  Boyd. 
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From  Targeting  Objects  to  Targeting  Individuals 

Newtonian  Assumption:  The  world  is  continuous. 

New  Science  Assumption:  The  world  is  digital. 

Complementarity  Condition:  When  the  world  is  viewed  at  a  level  of  granular¬ 
ity  that  is  too  large  to  detect  individuals,  the  strategy  will  reflect  only  an  “aver¬ 
age”  response  that  neglects  differences  among  individuals. 

Example  1 :  If  one  thousand  honeybees  can  collect  one  thousand  grams  of  pol¬ 
len  in  one  hour,  in  the  same  time  how  many  grams  can  half-a-honeybee  collect? 
In  the  Newtonian  world,  the  answer  is  calculated  to  be  half-a-gram;  in  the  biolog¬ 
ical  world  the  answer  is  zero  grams  because  half-a-honeybee  is  dead.  Therefore, 
Newtonian  thinking  only  works  under  conditions  where  individuals  don’t  matter. 

Example  2:  If  two  percent  of  the  female  population  is  pregnant,  and  we 
select  twenty-five  females  from  that  population,  how  many  of  them  will  be 
pregnant?  In  the  Newtonian  world  you  will  find  half  a  pregnant  female;  in  the 
biological  world  all  you  can  say  is  each  individual  has  a  two  percent  chance  of 
being  pregnant,  but  in  each  case  the  answer  is  either  yes  or  no — one  cannot  be 
half -pregnant.  Newtonian  thinking  ignores  individuals  and  can,  therefore,  only 
describe  an  “average”  individual  or  theoretically,  one  individual  in  a  population 
where  all  are  identical. 

The  take-home  message  here  is  that  in  biological — and  human — systems,  the 
whole  is  not  just  the  sum  or  the  average  of  the  parts.  Individuals  matter!  There 
are  properties  and  behaviors  that  are  characteristic  of  an  individual  that  cannot  be 
subdivided  any  further.  The  New  Science  must,  therefore,  be  able  to  account  for 
individuality  within  populations. 

From  a  Two-Player  Zero-Sum-Game  to  a  Multi-Player  Non-Zero-Sum 

Game 

Newtonian  Assumption:  All  organizations  are  identical. 

New  Science  Assumption:  All  organizations  are  individuals  in  their  own  right 
with  differing  characteristics  dependent  on  the  individuals  that  comprise  them. 

Complementarity  Condition:  When  organizations  are  so  simple  that  the  indi¬ 
viduals  who  comprise  them  can  be  ignored  (either  because  they  are  all  identical 
or  because  only  a  single  individual  speaks  for  the  entire  organization),  then  the 
organization  will  have  only  a  single  “center  of  gravity”  which  defines  all  its 
actions  and  vulnerabilities. 
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Example:  I  see  a  large  mammal  with  a  furry  coat.  Is  it  a  threat?  The  Newto¬ 
nian  answer  is  that  it’s  large  and  anything  large  must  be  a  threat.  The  biologi¬ 
cal-quantum-answer  is  “It  all  depends.”  If  it’s  a  lion  and  I  have  no  gun,  it’s  a 
threat;  if  it’s  a  lion,  and  I  have  a  gun,  it’s  game,  but  it  might  be  a  threat  if  I  drop 
my  gun;  if  it’s  an  antelope  and  I  have  no  gun,  it’s  not  a  threat;  if  it’s  an  antelope 
and  I  have  a  gun,  it’s  not  a  threat  even  if  I  drop  my  gun.  Newtonian  models  are 
two-player  zero-sum  games;  answers  are  always  “yes”  or  “no”  in  the  Newto¬ 
nian  world.  Once  I  know  enough  information  to  determine  the  most  important 
single  factor  in  making  the  model,  then  there’s  only  a  “yes”  or  “no”  answer. 
The  quantum  or  biological  model  needs  to  collect  enough  data  to  discern  char¬ 
acteristics  of  the  organism  or  organization.  This  is  based  on  the  assumption  that 
there  are  individual  characteristics  of  an  organization  since  it  is  built  of  non¬ 
identical  individuals,  be  it  an  organism  built  of  individual  cells  or  an  organiza¬ 
tion  built  of  individual  organisms.  A  pride  of  lions  is  very  different  from  a  herd 
of  antelopes  or  a  herd  of  cattle  when  estimating  whether  it  is  a  threat  to  an  indi¬ 
vidual  human  or  to  group  of  cowboys. 

Biological  organisms  are  organizations  made  of  different  kinds  of  individuals 
and  organizational  thinking  depends  on  very  subtle  differences  in  the  makeup  of 
those  organisms.  This  makes  biological  models  multiple  player  non-zero  sum 
games.  Each  individual  organization  will  have  its  own  goals  for  survival  and  its 
own  definition  of  winning.  Put  a  lion  and  a  deer  together  and  for  the  lion  a  “win” 
is  dinner  while  for  the  deer  a  “win”  is  survival.  Add  a  hyena  and  the  lion  might 
have  two  choices  for  dinner  while  the  hyena  is  rooting  for  the  lion  because  its 
dinner  is  leftovers;  and  in  any  case  the  antelope  just  wants  to  survive. 

The  New  Science  must  account  for  differences  in  organizations  and  must 
be  able  to  account  for  non-zero-sum  games.  In  any  biological  system,  the 
best  answer  is  the  win-win  scenario.  Newtonian  models  don’t  even  consider 
that  option. 

Cold  War  Intelligence:  It  is  “Us”  versus  “Them,”  and  the  World  is  bipolar.  In 
the  Cold  War  the  only  decisionmakers  who  mattered  were  the  Politburo;  everyone 
else  was  just  following  orders.  Since  the  Cold  War  was  built  on  the  assumption 
that  “Communism”  was  a  monolithic  entity,  the  level  of  granularity  in  decision¬ 
making  needed  only  to  assume  Us  vs.  Them.  Therefore,  we  needed  only  consider 
dictators  who  were  on  “Our  Side”  or  “Their  Side;”  by  that  definition  Saddam 
Hussein  was  a  “Good  Guy.”  We  also  only  needed  to  consider  who  was  fighting 
on  “Our  Side,”  not  why  they  were;  in  the  Cold  War  world  we  could  ignore  the 
reasons  that  Islamic  nations  might  choose  to  fight  Communism  because  the  adage 
“the  enemy  of  my  enemy  is  my  friend”  was  all  the  rationale  we  needed.  This 
method  of  intelligence  analysis  also  resulted  in  an  emphasis  on  assessing  capabil- 
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ity  to  the  exclusion  of  assessing  intent.  If  we  assume  that  every  individual  is 
either  “with  us”  or  “against  us,”  we  don’t  need  to  know  their  intent  to  any  level  of 
granularity  more  than  that;  but  we  do  need  to  know  what  their  capabilities  are  so 
we  can  assess  how  large  a  threat  they  are  if  they  are  “against  us.”  Intelligence  in 
the  Newtonian  zero-sum  game  world  was  easy:  (1)  pick  the  biggest  threat;  (2) 
divert  all  your  intelligence  assets  in  a  huge  task  force  to  find  its  center  of  gravity; 
(3)  defeat  its  center  of  gravity  and  it  will  crumble.  When  you  are  done,  find  the 
next  biggest  threat  and  repeat  the  process. 

Afghan  War  Intelligence:  It  is  a  multi-polar  world  where  every  country, 
organization,  and  individual  has  distinct  goals  and  decisionmaking  processes  to 
reach  those  goals.  Finding  allies  with  common  goals  could  work  toward  win- 
win  scenarios.  Not  only  were  the  Taliban,  Northern  Alliance,  and  A1  Qaeda  dis¬ 
tinct  organizations,  but  also  one  could  expect  both  the  leaders  and  individual 
citizens  in  each  of  the  organizations  to  make  decisions  differently.  The  U.S. 
found  correctly  that  the  multiple  factions  within  Afghanistan  had  their  own  cul¬ 
tures  and  goals.  This  meant  that  by  encouraging  the  Northern  Alliance  we 
found  our  “eyes”  on  the  ground  to  provide  the  valuable  HUMINT  targeting  we 
needed  to  distinguish  between  Taliban,  A1  Qaeda,  and  just  your  average  citizen, 
truck,  or  wedding  celebration.  However,  this  also  required  a  realization  that  the 
Northern  Alliance  would  then  become  a  player  in  the  new  government  that 
would  rebuild  Afghanistan  according  to  an  Afghan  “win”  scenario.  It  also 
meant  that  once  the  war  was  headed  toward  victory,  the  Taliban  rank-and-file 
became  a  political  problem  rather  than  a  military  one;  since  to  the  Northern 
Alliance  the  Taliban  were  also  fellow  Afghans,  Taliban  rank-and-file  were  re¬ 
assimilated  within  the  Afghan  populace  while  the  Taliban  leadership  disap¬ 
peared  because  their  power  base  was  gone.  On  the  other  hand,  A1  Qaeda  fight¬ 
ers — who  were  mainly  non-Afghans  anyway — disappeared  to  regroup 
elsewhere  and  remain  a  significant  threat. 

Industrial-Age  intelligence  ignored  both  the  quantum  nature  of  organizations 
and  the  fact  that  individuals  even  exist.  Therefore,  intelligence  analysts  only 
needed  to  estimate  if  they  were  on  “Our  Side”  or  “Their  Side” — being  an  “enemy 
of  my  enemy”  was  a  sufficient  estimate  for  decisionmaking.  It  also  led  to  a  sim¬ 
plistic  model  of  the  world  where  a  “center  of  gravity”  was  all  that  one  needed  to 
find  to  solve  the  intelligence  problem  once  and  for  all. 

Information- Age  intelligence  analysis  must  account  for  individuality — both  at 
the  organizational  level  and  the  individual  level.  The  Information-Age  intelli¬ 
gence  analyst  must  be  knowledgeable  of  not  only  the  overall  organization  but  its 
infrastructure,  its  leadership,  and  its  culture  as  well.  The  Information- Age  analyst 
must  assess  intent  at  least  as  well  as  he  or  she  assesses  capability. 
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In  WMD  analysis,  these  distinctions  are  critical.  Clearly  any  nation  that  pos¬ 
sesses  WMD  is  a  potential  threat.  Certainly,  the  most  important  questions  a  U.S. 
policymaker  needs  to  know  about  a  country  that  possesses  WMD  are,  “Is  it  a 
threat?  What  should  I  do  about  that  threat?  How  do  I  respond  when  that  state’s 
leader  goes  against  U.S.  interests?” 

In  the  Newtonian  bi-polar  world  the  answers  were  easy  because  in  the  Newto¬ 
nian  world  “one  size  fits  all”  and  every  organization  is  the  same.  Intelligence  was 
done  by  assessing  capabilities  and  WMD  capability,  which,  once  assessed,  ended 
the  intelligence  problem  with  no  further  analysis.  “Yes,  any  nation  that  possesses 
WMD  is  a  threat.  We  should  preemptively  end  that  threat  by  causing  that  state  to 
disarm  or  cause  a  regime  change  to  make  that  happen.  Who  the  other  country’s 
leader  is  does  not  even  matter;  WMD  is  a  threat  and  must  be  ended  and  any  leader 
who  thinks  his  country  should  possess  WMD  should  be  ‘taken  out’  and  a  new 
regime  put  in  place.” 

In  the  Information- Age  world  the  answer  is  “it  all  depends.”  Just  as  all  “large 
mammals”  are  different,  all  “nations  possessing  WMD”  are  different  and  have 
different  kinds  of  leadership  and  different  national  goals.  Where  do  we  draw  the 
line  on  “regime  change”  as  the  only  way  to  end  the  WMD  problem — with  Sad¬ 
dam  Hussein  and  Iraq?  Kim  Chong-11  and  North  Korea?  Ayatollah  Khatami  and 
Iran?  President  Musharraf  and  Pakistan?  Vladimir  Putin  and  Russia?  Ariel 
Sharon  and  Israel?  Jaques  Chirac  and  France?  Tony  Blair  and  Great  Britain? 

Surely  WMD  proliferation  is  the  most  important  intelligence  problem  of  the 
twenty-first  century.  But  analysts  cannot  hope  to  provide  policymakers  any 
options  other  than  “find  all  their  WMD  facilities  and  take  them  out  preemp¬ 
tively”  until  the  IC  has  analytical  tools  that  account  for  individuality — in  coun¬ 
tries,  the  organizations,  and  cultures  that  they  are  built  on,  and  the  personalities 
that  lead  them. 

Information- Age  intelligence  must  be  able  to  assess  both  capability  and  intent. 
Intelligence  analysts  need  new  methodologies  and  tools  that  can  transcend  New¬ 
tonian  Industrial- Age  thinking  to  be  able  to  provide  cogent  assessments  and  pro¬ 
vide  policymakers  options  that  are  individual-specific;  not  “one  size  fits  all.” 
Saddam  Hussein,  Kim  Chong-11,  Perez  Musharraf,  Ariel  Sharon,  Jaques  Chirac, 
and  Tony  Blair  can  all  employ  WMD  should  it  come  to  be  in  their  national  inter¬ 
ests  to  do  so — which  is  only  in  the  U.S.  national  interest  when  their  national 
interests  coincide  with  that  of  the  U.S.  Clearly,  there  are  differing  options  to  deal 
with  these  individual  leaders  and  their  individual  nations.  The  New  Science  of 
Intelligence  for  the  Information  Age  needs  to  be  able  to  define  those  options 
clearly  and  distinctly. 
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Therefore,  we  need  to  rethink  our  intelligence  methodologies  and  tools  built 
for  the  Industrial  Age  using  Newtonian  thinking  and  replace  them  with  ones  built 
for  the  Information  Age  built  using  quantum  thinking.  The  core  of  Industrial- Age 
intelligence  was  assessment  of  capabilities.  The  core  of  Information- Age  intelli¬ 
gence  must  be  assessment  of  intent. 

// 


MESSAGE 

Referring  back  to  our  previous  discussion,  we  can  say:  orientation  is  an 
interactive  process  of  many-sided  implicit  cross-referencing  projections, 
empathies,  correlations,  and  rejections  that  is  shaped  by  and  shapes  the 
interplay  of  genetic  heritage,  cultural  tradition,  previous  experiences, 
and  unfolding  circumstances ,23 

// 

Assessment  of  capabilities  was  built  on  understanding  and  identifying 
things — weapons  and  the  facilities  that  make  them.  Assessment  of  intent  must  be 
built  on  understanding  people  as  individuals  and  the  organizations,  countries,  and 
cultures  they  build — for  it  is  people  who  build  WMD. 


23  Col  Boyd. 
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Chapter  6 


TOWARD  NOVEL  INTELLIGENCE  FROM  MASSIVE  DATA 

Data  can  be  “massive”  both  in  quantity  and  type.  A  major  problem  in 
exploiting  the  massive  quantities  of  data  available  to  the  Intelligence 
Community  is  the  lack  of  a  historical  baseline  and  a  lack  of  librarians 
and  curators  to  organize  and  tag  the  data  for  easy  retrieval.  This  means 
that  we  must  develop  methods  for  rapid  writing  of  classified  history  and 
for  systematic  data  archiving.  Data  can  also  be  “massive”  in  its  dimen¬ 
sionality.  Collecting  and  analyzing  massive  amounts  of  data  will  not  pro¬ 
vide  valid  assessmen  ts  unless  the  dimensionality  of  the  data  reflects  the 
dimensionality  of  the  problem. 

We  must  reconcile  ourselves  to  the  fact  that  the  Community  is  unlikely  to  hire 
human  librarians  and  curators  to  support  analysts  in  the  way  that  other  informa¬ 
tion-dependent  organizations  support  their  researchers.  This  means  that  we  must 
develop  methods  to  bypass  the  need  for  librarians  and  curators  by  automating 
those  functions,  that  is,  developing  computer  tools  for  data  archiving  and 
retrieval. 

Data  can  also  be  “massive”  in  their  dimensionality.  Collecting  and  analyzing 
massive  amounts  of  data  will  not  provide  valid  assessments  if  the  dimensionality 
of  the  data  does  not  reflect  the  dimensionality  of  the  problem.  Moreover,  analyti¬ 
cal  methods  are  required  to  assess  both  current  position  and  projected  intentions. 
Methodologies  that  hope  to  project  target  intentions  into  the  future  must  be  based 
on  data  collection  for  a  longer  time  period  into  the  past;  current  intelligence  data 
cannot  be  used  to  build  warning  intelligence. 

The  analyst  is  swamped  with  data  on  a  day-to-day  basis.  There  is  so  much 
information  out  there  that  too  little  time  exists  to  be  able  to  use  it  to  answer  the 
questions  that  need  to  be  answered.  We  need  to  find  ways  to  be  able  to  wade 
through  the  massive  amount  of  data  “out  there”  and  use  it  to  find  the  “nuggets” 
we  need  to  answer  those  questions.  A  current  project  funded  by  the  Advanced 
Research  Development  Activity  to  address  that  issue  is  call  NIMD,  or  “Novel 
Intelligence  from  Massive  Data.” 

The  NIMD  charter  suggests  that  “massive”  data  are  those  that  are  either  too 
large  in  quantity  or  in  too  heterogeneous  a  format  for  us  to  be  able  to  use  effec¬ 
tively.  I  suggest  that  this  well-intentioned  answer  and  the  methodology  used  to 
pursue  it  is  in  fact  a  straight  line,  flat-earth  approach  using  Newtonian  Indus¬ 
trial-Age  thinking,  whereas  we  need  a  great  circle  spherical-earth  approach 


45 


using  Digital-Information  thinking.  Newtonian  thinking  is  a  paper-and-pencil 
approach  that  is  inherently  a  2-D  method  to  model  continuous  single-valued 
systems,  so  any  methodology  we  build  using  a  Newtonian  model  must  also  be 
inherently  2-D,  continuous,  and  single-valued.  Therefore,  before  we  can  truly 
find  “novel”  intelligence  from  “massive”  data,  we  must  re-define  what  we  mean 
by  “novel”  and  “massive”  for  an  Information-Age  model  that  is  N-dimensional, 
digital,  and  multistate. 


What  is  “Novel”  Intelligence? 

“Novel”  is  defined  as  “new  and  unusual,  especially  being  the  first  of  its  kind.” 
Current  efforts  such  as  NIMD  concentrate  on  the  first  part  of  the  definition,  “new 
and  unusual.”  However,  as  I  will  shortly  show,  finding  “new  and  unusual”  intelli¬ 
gence  data  in  enormous  quantities  is  not  a  problem — so  long  as  it  is  not  the  first 
of  its  kind.  The  challenge  for  the  Information  Age  is  to  be  able  to  find  intelligence 
that  is  “the  first  of  its  kind”  within  an  enormous  dataset  where  the  required  data 
has  not  been  structured  by  conventional  techniques. 

The  Industrial- Age  definition  of  “novel”  is — new  and  unusual  within  the  cur¬ 
rent  model  but  not  the  first  of  its  kind. 

The  Information- Age  definition  of  “novel”  must  be — new  and  unusual  and  the 
first  of  a  totally  new  kind  of  data  requiring  a  new  model  to  understand. 

What  is  “Massive”  Data? 

The  Industrial-Age  definition  of  “massive”  data  is — data  whose  sheer,  enor¬ 
mous  quantity  is  too  great  for  our  methodologies  to  exploit. 

I  suggest  that  the  Information- Age  definition  of  “massive”  data  must  be — data 
whose  dimensionality  is  too  great  for  our  methodologies  to  exploit.  I  can  indicate 
this  by  two  examples: 

■  A  simple  research  project  that  shows  that  sheer  quantity  of  data  is  not  an  issue 
for  even  a  neophyte  trained  in  Information- Age  methodologies  as  long  as  the 
data  are  of  a  kind  that  has  already  been  modeled. 

■  A  simple  data-reduction  problem  that  shows  that  dimensionality  of  data  can 
require  a  total  rethink  of  how  we  exploit  that  data  even  when  the  dataset  con¬ 
tains  only  four  data  points  and  four  observations  associated  with  those  data 
points. 
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Example  1  —  An  8th  Grade  Science  Project  In  the  Information  Age 


Just  recently  my  younger  daughter,  who  is  an  8th  grader,  came  home  with  a 
science  project  to  find  out  about  an  “American  inventor  who  invented  something 
that  is  smaller  than  6  inches”  and  no  further  instructions.  On  first  glance  one 
would  think  that  her  problem  is  equivalent  to  the  intelligence  analyst’s  project  to 
find  out  about  an  “Iraqi  scientist  capable  of  inventing  a  new  BW  agent.”  But  it 
cannot  be  because  she  could  finish  her  inventor  project  in  about  six  hours  with  a 
tiny  amount  of  parental  guidance  and  no  research  budget  while  the  IC  is  spending 
millions  of  dollars  and  employing  teams  of  highly  trained  analysts  and  collectors 
on  the  Iraqi  scientist  problem.  Besides,  the  IC  team  has  access  to  many  times  the 
data  in  many  relational  databases  but  my  daughter  has  only  her  Internet  browser 
and  a  library  card.  Surely  my  daughter  has  a  NIMD  problem  because  the  amount 
of  data  she  needs  to  sort  through  on  the  Internet  and  library  is  truly  “massive”  in 
the  Industrial-Age  definition  of  “very  large.”  Why  is  her  problem  so  much  easier 
than  that  of  the  Iraqi  WMD  analysts? 

I  suggest  that  there  are  four  major  differences  in  the  American  inventor  prob¬ 
lem  and  the  Iraqi  scientist  problem  that  make  my  daughter’s  project  a  single  Sun¬ 
day  afternoon’s  work  and  the  Iraqi  WMD  analyst’s  a  daunting  challenge.  And 
note  that  none  of  these  differences  have  anything  to  do  with  the  sheer  size  or  het¬ 
erogeneity  of  the  respective  datasets: 

(1)  Historians  have  already  collected,  parsed,  and  modeled  inventors  and 
inventions  using  very  old,  tried  and  true  research  techniques  but  the 
IC  has  yet  to  do  the  in-depth  historical  research  required  for  the  scien¬ 
tist  and  BW  agent  problem. 

(2)  The  librarians  have  already  cataloged  all  the  current  material  on 
inventors  and  inventions  using  very  old,  tried  and  true  library  science 
techniques,  but  the  IC  has  yet  to  build  the  kind  of  library  required  for 
the  scientist  and  BW  agent  problem. 

(3)  My  daughter  can  easily  search  the  enormous  quantity  of  data  on  the 
Internet  using  the  Google  search  engine  because  she  already  had  a 
model  for  her  inventor  but  the  IC  is  hampered  by  its  lack  of  a  specific 
model  for  their  scientist. 

(4)  Although  my  daughter’s  project  is  “novel”  for  her  because  it  is  “new 
and  unusual”  it  is  not  truly  “novel”  because  it  is  not  the  “first  of  its 
kind”  in  that  many  other  people  and  students  have  asked  the  same 
question.  The  Iraqi  WMD  analyst’s  project  is  “novel”  in  both  senses 
of  the  word  because  no  one  has  ever  considered  how  Iraq’s  BW  pro¬ 
gram  has  grown  historically — certainly  not  at  the  classified  level. 
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Faced  with  the  task  of  finding  the  “American  inventor  who  invented  something 
smaller  than  six  inches”  my  daughter  asked  me  to  take  her  to  the  library  and  said, 
“Dad,  please  help  me.  I  don’t  even  know  where  to  start.”  So  I  went  to  the  online 
catalog,  searched  for  “inventor”  and  “invention”  and  by  scanning  the  myriad 
titles  noticed  that  virtually  all  were  tied  to  Library  of  Congress  (LC)  Call  Number 
“609.”  I  told  her  we  would  look  for  the  books  with  “609,”  we  then  read  the  LC 
numbers  on  the  shelves  until  we  found  them,  and  I  started  handing  her  books  with 
that  number  that  had  to  do  with  inventors  and  inventions... and  she  did  the  rest.. .all 
in  an  afternoon’s  work. 

What  call  number  does  the  Iraqi  analyst  need  to  retrieve  the  data  on  Iraqi  biol¬ 
ogists  and  microbiologists?  Or  even  more  fundamentally — if  there  is  a  call  num¬ 
ber  for  Iraqi  biologists,  are  there  any  books  on  the  topic?  And  once  we  have  the 
names  of  the  inventor  or  scientist,  how  do  we  learn  more? 

In  today’s  world  that  is  easy  for  finding  American  inventors  but  impossible  for 
finding  Iraqi  BW  scientists  for  several  reasons: 

New  Knowledge  is  Built  on  a  Baseline  of  Old  Knowledge  Built 

by  Historians 

The  IC  dataset  is  “massive”  because  there  are  no  historians  to  provide  perspec¬ 
tive  on  what  it  means. 

There  are  no  classified  historical  baselines  because  there  are  no  historians 

in  the  IC.  Most  of  the  intelligence  data  are  currently  in  the  form  of  text  messages 
residing  in  multiple  databases.  The  Iraqi  analysts  could  get  off  to  a  good  start  on 
their  project  by  finding  classified  books  such  as  “The  Flistory  of  Iraqi  Science,”  or 
“A  Decade  of  Evading  the  UN  Weapons  Inspectors.”  But  such  books  do  not  exist. 
Flistorians  can  provide  an  excellent  baseline  on  many  issues  of  interest  to  the 
intelligence  analyst,  but  only  from  unclassified  records.  They  don’t  have  access  to 
the  billions  of  text  messages  in  IC  databases,  but  the  IC  does  not  employ  any  of 
its  own  historians  to  build  such  a  baseline.  And  analysts  do  not  have  the  time — or 
don’t  stay  on  one  project  long  enough — to  build  the  historical  baseline  that  gives 
context  for  their  current  analysis.  My  daughter  can  rapidly  find  information  on 
American  inventors  and  their  inventions  because  there  are  historians  writing 
books  about  them;  the  Iraqi  analysts  cannot  do  the  same  because  there  are  no  his¬ 
torians  writing  classified  books  on  WMD  programs  anywhere. 

IC  Challenge:  Flow  can  we  build  the  historical  baseline  with  no  historians? 
Flow  can  we  automate  the  function  of  those  absent  classified  historians  with 
smart  computer  programs? 
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Information  Retrieval  is  Built  on  Library  Science  by  Librarians 


The  IC  classified  datasets  are  virtually  impossible  to  use  because  there  are  no 
librarians  to  catalog  and  meta-tag  them. 

There  is  no  catalog  of  classified  documents  because  is  no  National 
Library  of  the  IC.  One  can  very  rapidly  find  books  on  any  imaginable  topic  in 
a  library  catalog  because  a  librarian  somewhere  took  the  time  to  assign  a 
Library  of  Congress  number.  Think  of  how  hard  it  would  be  to  use  a  library  if 
there  were  no  librarians — only  computer  engineers  to  maintain  the  comput¬ 
ers — and  all  the  books  were  placed  randomly  on  the  shelves  without  anyone 
assigning  Library  of  Congress  codes.  My  daughter  could  easily  retrieve  the 
half-dozen  books  on  American  inventors  and  then  use  the  Tables  of  Contents 
and  Indices  to  choose  one  who  invented  something  “smaller  than  six  inches” — 
having  quickly  found  the  inventors  of  the  paper  clip,  the  computer  mouse,  and 
many  others.  The  intelligence  analysts  have  no  such  ability  to  do  the  same 
because  in  the  IC,  libraries  only  have  unclassified  source  materials,  and  classi¬ 
fied  documents  are  stored  online  in  databases  compiled  by  computer  engineers 
without  librarians  to  oversee  the  cataloging  and  indexing  that  the  rest  of  the 
world  uses  to  make  data  retrieval  easy. 

IC  Challenge:  How  do  we  catalog  and  index  the  IC  products  both  hard  copy 
and  online  on  Intelink  for  easy  retrieval  of  relevant  documents?  How  do  we 
replace  the  missing  librarians  by  smart  computer  programs? 

There  is  no  meta-tagging  for  easy  document  retrieval  because  there  are  no 
librarians  to  maintain  IC  databases.  One  can  also  find  records  very  rapidly  in  a 
huge  database  like  the  National  Institutes  of  Health’s  online  PubMed  database  of 
biological  research  because  the  National  Library  of  Medicine  (NLM)  hires  librar¬ 
ians  to  meta-tag  every  journal  article  in  a  standard  format  for  authors,  titles,  affil¬ 
iations  and  to  select  a  list  of  keywords  on  that  article  on  the  basis  of  a  standard 
NLM  ontogeny.  PubMed  is  easy  to  use  because  every  scientific  paper  that  is 
abstracted  in  that  database  is  read  individually  and  meta-tagged  by  a  real  person 
at  the  NLM,  usually  called  a  curator.  The  IC  has  hired  many  different  IT  contrac¬ 
tors  to  develop  ontologies  for  IC  records — reinventing  the  Library  of  Congress 
codes  and  specialized  ontologies  of  the  NLM  and  other  specialized  databases. 
Ontologies  do  not  work  until  they  are  assigned  to  each  individual  record — and 
there  are  no  curators  in  the  IC  who  do  so. 

IC  Challenge:  How  can  we  meta-tag  existing  documents  in  IC  databases  and 
provide  policies  for  easily  meta-tagging  new  ones?  How  do  we  replace  all  the 
missing  data  curators  with  smart  computer  programs? 
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There  is  No  Easy  Way  to  Data-mine  Heterogeneous  Data  Sets  Because 
Historical  Baselines  are  not  Available  for  IC  Analysts 


Once  my  daughter  found  an  “invention  less  than  six  inches”  and  the  name  of 
the  inventor  from  the  general  studies  in  the  library  books,  finding  additional  data 
on  the  Internet  was  very  simple  using  the  Google  search  engine  and  looking  for 
records  that  contain  that  inventor’s  name  and/or  the  name  of  the  invention.  In  any 
data-mining  search  of  heterogeneous  data  on  the  Internet,  the  key  is  finding  a  spe¬ 
cific  starting  point  such  as  a  person’s  name  plus  an  associated  fact  (such  as  their 
invention  or  where  they  work  or  what  their  expertise  is).  Potentially,  the  Iraqi 
analysts  could  search  for  all  the  “anthrax”  experts  who  work  at  universities  in 
“Baghdad,”  but  there  are  so  many  possible  pairs  of  keywords  that  could  apply  to 
“an  Iraqi  scientist  capable  of  producing  a  BW  agent”  that  pairing  them  one  by 
one  is  prohibitive.  One  needs  the  clues  from  the  more  generic  search  of  the  histor¬ 
ical  baseline. 

IC  Challenge:  How  can  we  provide  data-mining  profiles  for  data  retrieval  that 
can  work  independently  of  a  historical  baseline?  Again,  how  do  we  replace  the 
missing  historians  with  smart  computer  programs? 

Discovery  of  “Novel”  Intelligence  Requires  Re-searching  the  Data 

Using  New  Models 

Data-mining  is  easy  for  tracking  known  entities  with  known  interactions,  but 
virtually  impossible  for  identifying  new  kinds  of  interactions  with  unknown 
entities — even  if  the  data  are  contained  in  the  dataset. 

My  daughter’s  project  was  not  “novel”  because  ultimately  she  was  merely 
retrieving  and  assembling  research  done  by  historians.  But  for  the  Iraqi  analysts, 
there  is  no  historical  baseline  (that  is,  there  is  no  classified  historical  study  of 
Iraqi  scientists).  Or,  if  the  project  may  be  addressing  a  totally  new  issue  (that  is,  if 
the  scientist  we  are  looking  for  is  actually  a  Russian  scientist  recruited  by  the  Ira¬ 
qis).  In  this  case,  the  project  is  truly  “novel” — in  the  sense  that  they  must  look  for 
unexpected  relationships.  It  may  be  that  the  data  were  never  collected,  but  if  the 
data  were  contained  in  the  dataset,  it  may  not  be  amenable  to  straightforward 
analysis. 

Data-mining  is  easy  for  known  “bad  guys”  but  not  very  good  for  identify¬ 
ing  new  ones — without  a  source  somehow  saying  “this  new  guy  is  suspicious, 
and  you  should  examine  him.”  This  is  the  true  challenge  that  “massive”  data 
presents — “How  can  we  data-mine  an  existing  dataset  for  new  relationships 
between  unknown  entities?”  But  if  the  dataset  does  not  even  have  a  method 
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to  extract  all  the  entities  or  a  method  to  describe  all  the  possible  types  of 
interactions  between  them,  this  is  impossible. 

A  simple  way  of  organizing  data  used  by  historians  and  other  researchers — 
and  indeed  sometimes  8th  graders — to  solve  this  problem  is  the  tried- and-true  3” 
by  5”  index  card  (3x5  card).  After  the  relevant  documents  are  collected,  the 
researcher  uses  the  Table  of  Contents  or  Index  to  find  and  read  the  relevant  sec¬ 
tions — or  sometimes  just  reads  the  entire  document  if  the  interactions  have  not 
been  well  defined — and  writes  down  individual  interactions  as  single  sentences 
on  3x5  note  cards  (along  with  bibliographic  reference  data).  Once  all  the  current 
relevant  documents  are  parsed  this  way,  all  the  3x5  cards  are  re-organized  to  fol¬ 
low  threads  of  interactions  that  tell  a  story.  Different  cards  arranged  different 
ways  could  tell  many  stories  off  the  same  3x5  card  deck.  The  historian  can  then 
tell  the  story  for  the  project  at  hand  and  save  all  the  cards  for  later  re-analysis. 
Often  by  following  threads  through  the  3x5  card  deck,  “novel”  relationships  will 
emerge  that  allow  telling  unexpected  stories. 

In  essence,  relational  databases  are  merely  electronic  3x5  card  decks.  Rela¬ 
tional  databases  have  the  advantage  that  once  the  individual  interactions  arc 
entered,  the  electronic  3x5  cards  can  be  arranged  and  re-arranged  in  many  ways. 
But,  both  relational  databases  and  3x5  card  decks  are  limited;  it  does  not  matter 
how  elaborate  the  electronic  interfaces  and  tools  or  how  big  and  ornate  the  3x5 
card  box,  the  ability  to  mine  new  data  depends  on  the  quality  and  number  of 
“cards”  that  comprise  the  dataset. 

IC  Challenge:  How  can  we  rapidly  build  the  huge  relational  datasets  required 
for  the  wide  range  of  problems  needed  to  be  analyzed  by  the  IC?  How  may  the 
historian  or  researcher  be  replaced  by  an  electronic  tool  that  can  effectively 
read  and  understand  language  well  enough  to  build  an  effective  electronic  “3x5 
card”  file? 

The  major  problem  in  using  the  massive  quantities  available  to  the  Community 
has  less  to  do  with  the  sheer  magnitude  of  the  data  than  the  lack  of  historians  to 
build  a  baseline  of  knowledge  and  the  lack  of  librarians  and  curators  to  organize 
and  tag  the  data  for  easy  retrieval.  We  must  reconcile  ourselves  to  the  fact  that  the 
Intelligence  Community  is  unlikely  to  hire  human  historians,  librarians  and  cura¬ 
tors  to  support  analysts  in  the  way  that  other  information-dependent  organiza¬ 
tions  support  their  researchers.  This  means  that  we  must  develop  methods  to 
bypass  the  need  for  historians,  librarians  and  curators  by  automating  those  func¬ 
tions,  that  is,  developing  computer  tools  for  data  archiving  and  retrieval. 
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Example  2  —  The  Submariner’s  Bearing-Only  Targeting  Problem 

“Massive”  data  can  also  be  data  that  contain  more  dimensions  than  can  be  han¬ 
dled  by  the  available  data  collection,  analysis,  or  representation  tools. 

Submariners  deal  with  the  problem  of  data  dimensionality  on  a  day-to-day 
basis.  We  can  use  a  simple  submarine  bearings-only  Time-Motion  Analysis 
(TMA)  to  demonstrate  that  a  dataset  of  only  four  data  points  can  be  too  “mas¬ 
sive”  for  the  analyst  to  draw  a  meaningful  answer  if  the  methods  by  which  the 
data  were  collected  and  analyzed  did  not  account  for  the  dimensionality  of  the 
problem. 

In  sub  vs.  sub  encounters,  the  submariner  usually  uses  passive  sonar,  which 
can  only  collect  bearings  to  the  target.  Obtaining  direct  ranges  requires  using 
active  sonar,  which  the  submariner  is  loath  to  use  because  it  gives  away  his  pres¬ 
ence.  The  passive  sonar  bearings  are  then  plotted  and  used  to  analyze  for  the  tar¬ 
get’s  course,  speed  and  range. 


The  submariner  needs  to  know  both  where  the  target  is  now  and  also  what  its 
intentions  are  to  be  able  to  intercept  it.  Every  submariner  knows  that  a  full  target 
description  contains  four  distinct  parameters:  (1)  bearing,  (2)  range,  (3)  course, 
and  (4)  speed.  Therefore,  at  least  four  observations  are  required  to  define  all  four. 
Using  only  bearings  (as  shown  on  the  right),  possible  target  tracks  are  the  series 
of  vectors  between  the  observed  bearings  that  define  a  straight  line.  Unfortu¬ 
nately,  it  can  be  shown  mathematically  that  determination  of  the  range  depends 
indirectly  on  not  only  the  target  course  vector  but  also  the  “own  ship’s”  course 
vector.  Accordingly,  there  are  an  infinite  number  of  possible  target  descriptions 
using  a  set  of  plotted  bearing  lines  if  “own  ship”  remains  on  the  same  course. 
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That  means  that  unless  own  ship  maneuvers  during  the  bearings-only  approach, 
the  dimensionality  of  the  solution  is  greater  than  the  dimensionality  of  the  data 
and  a  target  description  solution  is  impossible! 

Therefore,  the  submariner  knows  that  the  dataset  required  to  solve  the  bear- 
ings-only  TMA  problem  requires  at  least  two  observations  on  two  different  “own 
ship”  courses.  It  is  only  after  own-ship  collects  two  bearings,  maneuvers  and  col¬ 
lects  two  more  bearings  that  a  solution  can  be  attempted  (as  shown  below).  This 
drives  both  the  submariner’s  thinking  toward  data  collection  as  well  as  his 
patience  in  knowing  when  a  solution  is  possible. 

Like  the  submariner,  the 
intelligence  analyst  needs  to 
know  a  target’s  current  location 
and  its  intentions — but  the  ana¬ 
lyst’s  targets  are  much  more 
complex.  The  simple  subma¬ 
rine  TMA  problem  indicates 
that  in  determining  location  and 
intentions  a  minimum  amount 
of  data  of  the  appropriate 
dimensionality  is  required.  Col¬ 
lection  of  the  required  data 
requires  planning  to  ensure  that 
the  dimensionality  of  the  data 
can  support  the  dimensionality 
of  the  problem.  Furthermore, 
data  collection  and  analysis  will  require  a  certain  amount  of  time. 

History  matters  in  determining  intentions!  One  cannot  know  where  a  target  is 
going  unless  we  know  where  it  has  been.  And  the  more  complex  the  problem,  the 
more  history  that  must  be  collected  and  analyzed  to  construct  a  model  that 
reflects  both  target  current  position  and  projected  intentions. 

Analytical  methods  depend  on  data  that  reflect  the  dimensionality  of  the  prob¬ 
lem.  Collecting  and  analyzing  massive  amounts  of  data  will  not  provide  valid 
assessments  if  the  dimensionality  of  the  data  does  not  reflect  the  dimensionality 
of  the  problem.  Moreover,  analytical  methods  are  required  to  assess  both  current 
position  and  projected  intentions. 

Methodologies  that  hope  to  project  target  intentions  into  the  future  must  be 
based  on  data  collection  for  a  longer  time  period  into  the  past.  In  the  current  intel¬ 
ligence  world,  data  cannot  be  used  to  build  warning  intelligence.  To  be  able  to 
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provide  tactical  or  strategic  warning  in  a  world  of  WMD  and  terrorism,  we  must 
begin  to  rebuild  the  Intelligence  Community  by: 

■  Moving  beyond  Newtonian  thinking  to  use  new  analytical  methods 
built  on  quantum  thinking. 

■  Finding  ways  past  our  lack  of  historians,  librarians,  and  curators  to 
build  new  ways  to  assemble,  catalog,  and  retrieve  data. 

■  Moving  beyond  the  2-dimensional  Newtonian  world  to  build  new 
methodologies  built  on  quantum  thinking  that  will  allow  us  to  think  in 
multiple  dimensions. 

Only  then  can  we  move  beyond  Industrial-Age,  Newtonian  intelligence  that  con¬ 
siders  only  capability,  to  Information-Age  intelligence  that  can  consider  both 
capability  and  intent. 
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Chapter  7 


FROM  CURRENT  INTELLIGENCE  TO  STRATEGIC  WARNING 

Information-Age  organizations  needed  to  combat  WMD  and  terrorism 
proliferation  networks  must  be  able  to  process  intelligence  and  make 
decisions  differently  from  Industrial-Age  organizations  in  the  Cold  War. 

Using  the  Decision  Cycle  (or  OODA  Cycle)  as  a  model  for  how  organi¬ 
zations  work  suggests  that  the  nature  of  the  organization  ( network  vs. 
hierarchy)  is  dependent  on  its  goals  and  its  environment.  The  ability  to 
provide  strategic  warning  requires  that  information  flow  within  Intelli¬ 
gence  Community  must  change  by  changing  the  way  the  organization 
processes  information. 

More  could  be  less  if  commanders  cannot  make  sense  of  it.  Even  in  1991. 
when  far  less  information  streamed  into  Schwarzkopf’s  headquarters,  it  was  diffi¬ 
cult  to  separate  out  the  best  information,  says  former  Marine  lieutenant  general 
Bernard  Trainor.  “It  was  like  a  fire  hose  coming  out,  and  people  were  getting 
information  of  no  interest  or  value  to  them,  and  information  that  was  (of  value) 
didn’t  get  to  them,”  says  Trainor,  co-author  of  The  General’s  War:  The  Inside 
Story  of  the  Conflict  in  the  Gulf.  “I  don’t  think  that  has  been  solved.”24 

The  top  worries  in  the  minds  of  the  men  who  will  run  the  war  with  Iraq 
reflect  the  new  face  of  warfare-information  overload  and  a  temptation  to 
micromanage  battles  from  their  high-tech  command  center  in  Qatar.25 

Information  Overload  is  a  new  reality  to  the  Intelligence  Community.  It  used 
to  be  that  intelligence  reporting  was  very  scarce  and  very  dear.  Imagine  a  World 
War  II  intelligence  analyst  ever  saying,  “I  don’t  have  time  to  read  everything  that 
comes  across  my  desk.”  Yet,  that  is  not  unusual  today  as  a  massive  quantity  of 
data  is  deposited  in  databases  around  the  IC,  much  of  which  is  never  read. 

On  the  afternoon  of  May  7,  a  Central  Intelligence  Agency  (CIA)  officer 
tried  desperately  to  contact  intelligence  officials  in  Europe  to  alert  them 
to  the  fact  that  the  Yugoslavian  military  facility  they  had  targeted  was,  in 
fact,  located  one  block  away  from  where  NATO  pilots  were  about  to  drop 
bombs.  By  the  time  his  concerns  could  be  registered,  planes  taking  part 


24 Andrea  Stone,  “Battlefield  Clearly  Visible  Far  Behind  the  Lines,”  USA  Today ,  13  March  2003, 
9A. 

25Paul  Martin,  “Glut  Of  Data  From  Battlefield  A  New  Command  Problem,”  Washington  Times, 
19  March  2003,  A12. 
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in  NATO’s  Operation  Allied  Force  already  were  flying  toward  the  target. 
When  the  smoke  cleared  the  next  morning,  NATO  awoke  to  the  harsh 
reality  that  it  had  just  bombed  the  Chinese  embassy  and  killed  three  peo¬ 
ple.  In  his  official  explanation  of  the  factors  that  contributed  to  the  deadly 
mistake,  CIA  director  George  Tenet  described  a  “severely  flawed”  target 
identification  process  made  worse  by  the  use  of  outdated  maps  and  data¬ 
bases  filled  with  erroneous  information.26 

After  Sputnik  and  9/11,  the  Intelligence  Community  has  been  frustrated  by  its 
inability  to  provide  strategic  or  even  tactical  warning.  And  yet  it  has  computer 
databases  full  of  massive  quantities  of  data. 

Today,  the  Defense  Intelligence  Agency  is  moving  forward  with  a  pro¬ 
gram  that  promises  within  the  next  five  years  to  eliminate  minor  yet 
potentially  deadly  errors  from  proliferating  throughout  the  intelligence 
community.  Known  as  the  Joint  Intelligence  Virtual  Architecture  (JIVA), 
the  goal  of  the  program  is  to  help  analysts  overcome  information  over¬ 
load  by  transforming  the  once  ad  hoc  process  of  sharing  critical  intelli¬ 
gence  data  into  a  fully  digitized,  dynamic  environment.27 

The  Intelligence  Community  has  been  building  and  rebuilding  and  pouring 
massive  resources  into  solving  “the  database  problem.”  Yet  there  appear  to  be 
very  few  signs  of  real  progress.  The  databases  do  not  seem  to  be  sufficient  to 
being  converted  into  more  valuable  intelligence.  Why  not?  Cynthia  Grabo  pro¬ 
vides  a  clue... 

Intelligence  is  made  up  of  many  facets  and  types  of  information,  some 
simple,  and  some  complex.  Some  readily  understood  by  non-experts,  and 
some  that  require  detailed  research  and  analysis  before  they  have  mean¬ 
ing  to  users.  If  the  sole  function  of  intelligence  was  to  compile  “facts,” 
there  would  be  little  need  for  analysts  of  any  type.  The  intelligence  pro¬ 
cess  would  consist  almost  entirely  of  collection  of  raw  data  which  would 
be  evaluated  for  accuracy  but  then  passed  on  without  further  comment  or 
analysis  to  the  policy  official.28 

Current  intelligence  is  different  from  tactical  warning  and  strategic  warning. 
As  Ms.  Grabo  notes,  the  key  to  warning  intelligence  is  not  collection  but  rather 


26Daniel  Verton,  Federal  Computer  Week,  18  October  1999.  URL:  www.  few.  com.  Cited  hereaf¬ 
ter  as  Verton. 

27  Verton. 

28Grabo,  133. 
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analysis.  A  bigger  database  full  of  massive  quantities  of  data  does  not  equate  to 
better  warning.  Only  better  analysis  and  the  ability  to  provide  context  can  provide 
better  warning. 

We  can  only  design  better  analysis  by  first  understanding  how  we  think  and 
analyze.  The  problem  is  not  how  any  one  of  us  thinks  but  rather  how  to  mobi¬ 
lize  all  the  brainpower  in  the  IC  to  be  able  to  think  as  one.  Before  we  can  build 
databases  that  work,  we  must  first  understand  the  interplay  of  intelligence  and 
operations  in  current  organizations  to  understand  what  those  databases  can — 
and  cannot — do. 

Tradeoffs  between  Intelligence  and  Operations 

Col  John  Boyd  defined  military  decisionmaking  by  a  “decision  cycle,”  or 
“OODA  Cycle,”  where  decisionmakers  Observe,  Orient,  Decide,  and  Act.  Thus  a 
basic  visualization  of  any  military  or  political  system  is  a  timeline. 


OBSERVE 

ORIENT 

DECIDE 

Each  OODA  Cycle  can  in  itself  be  broken  down  into  its  component  parts, 
each  one  of  which  is  also  an  OODA  cycle.  For  example,  the  D-Day  invasion  of 
Normandy  hinged  on  the  ability  to  launch  the  invasion  force  between  several 
Atlantic  storms.  To  do  so  required:  observing  weather  in  Iceland  and  in  the 
Atlantic,  orienting  all  the  data  on  a  weather  map,  deciding  that  it  was  time  to 
go,  and  acting  by  launching  the  invasion  force.  But  each  one  of  those  steps  was 
itself  an  OODA  cycle: 

■  The  meteorologist  “observing”  in  Iceland  measured  wind  speed  and 
barometric  pressure  with  his  instruments,  oriented  the  marks  on  the 
instruments  to  numbers  they  represented,  decided  to  send  the  readings 
to  England,  and  acted  by  radioing  the  readings. 

■  The  meteorologist  “orienting”  in  England  observed  all  the  incoming 
radio  messages  with  readings,  oriented  them  on  a  weather  map, 
decided  what  they  meant,  and  acted  by  briefing  General  Eisenhower 
that  the  time  was  right. 
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■  The  “decisionmaker”  General  Eisenhower,  observed  the  weather  brief, 
oriented  the  information  to  his  internal  timeline  and  experience, 
decided  that  the  time  was  right,  and  acted  by  saying,  “Let’s  go.” 

■  All  the  “actors”  and  forces  in  the  invasion  force  observed  the  order 
from  Eisenhower,  oriented  it  against  their  Op-order,  decided  it  was 
time,  and  acted  in  unison  to  invade. 


In  each  of  these  nested  OODA  Cycles  there  is  a  plan — a  systematic  series  of 
steps  from  conception  (of  what  needs  to  be  done)  through  maturity  (of  actually 
getting  it  done). 

As  organizations  evolve  from  loose  confederations  to  integrated  systems  of 
systems,  the  components  of  the  organization  redefine  their  roles:  going  from 
working  in  parallel  to  working  as  an  integrated  team.  The  increasing  demands  of 
the  Information  Age  for  quality  intelligence  and  warning  analysis  require  that  the 
Intelligence  Community  clearly  define  the  roles  of  its  component  agencies  to  do 
the  most  with  its  most  scarce  asset — its  analysts. 


Intelligence: 
Building  the  Plan 


Operations: 
Implementing  the  Plan 


OBSERVE 


OODA 


ORIENT 


-  OODA 


DECIDE 


-  OODA 


ACT 


-  OODA 


Conception 


Maturity 


The  Evolution  of  Organizations  through  Integration  of 
Decision  Cycles 

The  evolution  of  complex  systems  goes  through  a  definable  series  of  steps  as 
new  levels  of  complexity  emerge.  The  first  step  is  the  formation  of  a  new  unit 
where  before  there  was  only  a  set  of  unlinked  individuals. 

The  resulting  loosely  linked  organization,  which  we  will  call  a  network,  is 
linked  by  common  interests.  All  the  individuals  (be  they  organisms,  groups  of 
organisms,  or  organizations)  share  their  observations  and  orientations  (assess¬ 
ments  of  those  observations)  but  reserve  the  right  to  decide  and  act  on  their  own. 
A  biological  example  is  a  colony  of  bacteria,  and  a  social  example  is  a  commune. 
Even  though  decisions  are  made  individually,  if  all  the  members  of  a  network 
reach  a  consensus,  the  combination  of  all  the  individual  actions  will  be  much 
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stronger  than  the  sum  of  the  parts:  anthrax  or  botulinum  bacteria  can  collectively 
kill  an  infected  person  by  all  secreting  toxin  where  only  one  or  a  few  could  not; 
sharing  a  common  well  in  a  commune  benefits  all — even  if  everyone  uses  an  indi¬ 
vidual  bucket.  A  coalition  of  states  that  fights  a  common  foe — even  if  their  war 
fronts  are  totally  unlinked — can  provide  for  a  common  defense  much  more  effec¬ 
tively  than  the  individual  countries  acting  on  their  own. 

Often  organizations  continue  to  evolve  beyond  networks  to  provide  for  a  better 
mechanism  to  insure  coordinated  action. 

All  biological  systems  are  defined  by  four  characteristic  processes,  which 
include  the  ability  to:  (1)  extract  and  store  energy  from  the  environment,  (2)  sense 
and  respond  to  the  environment,  (3)  reproduce,  and  (4)  evolve.  The  Decision 
Cycle  or  OODA  Cycle  is  just  another  way  of  defining  the  second  of  these  pro¬ 
cesses — the  ability  to  sense  and  respond  to  the  environment. 

In  the  OODA  or  Decision  Cycle,  the  first  two  steps — observation  and  orienta¬ 
tion — are  what  we  commonly  call  intelligence.  An  individual’s  or  organization’s 
ability  to  make  the  best  possible  decision  is  directly  dependent  on  both  the  quality 
of  its  observations  of  the  world  and  its  assessments  of  what  those  observations 
mean.  The  orientation  step  is  a  comparison  of  the  input  observations  against  an 
internal  map  or  model  of  the  world  whereby  the  “orienter”  or  analyst  can  define 
its  own  position  in  the  world  and  define  possible  actions  by  displaying  options  on 
the  internal  map  and  projecting  whether  they  will  lead  to  “rocks  and  shoals”  or  to 
a  “safe  harbor.” 

In  the  OODA  or  Decision  Cycle,  the  second  two  steps — decision  and  action — 
are  what  we  commonly  called  operations.  Once  all  the  possible  options  are  laid 
out  on  the  internal  map  and  assessments  of  their  strengths  and  weaknesses  are 
made,  a  decision  is  made  to  take  the  best  possible  action.  The  more  coordinated 
the  parts  of  the  organism  or  organization  are  in  carrying  out  that  action,  the  more 
effective  that  action  will  be. 

Networks  have  an  advantage  over  groups  of  unlinked  individuals  in  that  the 
individuals  in  the  network  can  share  their  observations  and  assessments.  This 
makes  the  network  much  more  informed  because  the  individuals  can  share  not 
only  observations  of  others  who  might  be  able  to  see  farther  or  hear  better,  but 
also  assessments  of  dangers  or  possible  actions  from  those  who  might  have  a 
more  refined  map  or  model. 

The  inability  for  networks  to  be  able  to  provide  mechanisms  for  coherent  deci¬ 
sionmaking  or  coordinated  operations  usually  means  that  networks  evolve  toward 
a  second  kind  of  organization  which  we  will  call  a  hierarchy.  In  a  hierarchy  indi- 
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viduals  subordinate  their  decisionmaking  role  to  a  single  leader.  This  makes  the 
hierarchy  much  more  efficient  because  the  individuals  can  work  cooperatively 
toward  the  same  goals  based  on  the  decisions  of  the  leader. 

Networks  and  hierarchies  have  inherent  advantages  over  each  other,  but 
which  is  best?  Just  as  chemists  use  ideal  compounds — the  ideal  gas  and  the  per¬ 
fect  crystal — we  can  compare  a  perfect  network  and  perfect  hierarchy  to  under¬ 
stand  how  they  work.  Whenever  we  cannot  imagine  a  “perfect”  network  or 
hierarchy,  we  can  consider  the  closest  real-world  examples:  a  commune  is 
almost  a  pure  network  while  Stalin’s  USSR  or  the  Saddam  Hussein’s  Iraq 
approached  pure  hierarchies. 

Networks  versus  Hierarchies — Informed  Inaction  versus 
Uninformed  Action 

The  network  has  the  advantage  over  the  hierarchy  in  that  the  observing  and 
orienting  process  is  distributed  over  the  entire  organization — which  means  that  it 
can  bring  all  the  observational  and  assessment  skills  of  every  individual  to  bear 
on  any  problem.  The  wide-open  lines  of  communication  in  the  network  make  for 
effectiveness  in  sensing  the  world  and  orienting  its  place  in  that  environment. 
However,  since  organizational  operations  must  be  accomplished  by  consensus, 
the  network  is  inefficient  in  decisionmaking  or  acting.  The  network  is  thoughtful 
and  effective  but  slow  and  inefficient.  In  short,  a  network  is  characterized  by 
informed  inaction. 

The  hierarchy  has  the  advantage  over  the  network  in  that  the  decisionmaking  is 
concentrated  in  a  single  individual,  which  means  that  there  will  always  be  una¬ 
nimity  in  actions  because  all  individuals  are  following  orders  of  the  leader.  The 
restricted  lines  of  communication  in  the  hierarchy  make  for  efficiency  in  opera¬ 
tions.  However,  since  all  the  orienting  processes  are  also  concentrated  in  a  single 
individual,  the  hierarchy  is  only  as  smart  as  its  leader.  The  hierarchy  is  fast  and 
efficient  but  superficial  and  often  ineffective.  In  short,  a  hierarchy  is  characterized 
by  uninformed  action. 

But  which  is  better — a  network  or  a  hierarchy?  It  all  depends...  For  both 
organisms  and  organizations,  the  “better”  solution  is  the  one  that  leads  to  organis- 
mal  or  organizational  survival.  The  alternative  is  extinction  or  regime  change. 

The  key  to  any  Decision  Cycle  is  the  ability  to  formulate  and  implement  a  plan 
of  action  that  will  be  the  best  response  to  the  environment  on  the  basis  of  all 
available  observed  data.  And  there  will  always  be  three  kinds  of  tradeoffs 
required  for  any  organism  or  organization:  (1)  the  today  or  tomorrow  tradeoff,  (2) 
the  guns  or  butter  tradeoff,  and  (3)  the  intelligence  or  operations  tradeoff. 
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Informed  Inaction  vs.  Uninformed  Action 


The  present  versus  future  tradeoff  comes  from  the  dichotomy  between  the 
need  of  the  organism  or  organization  to  extract  and  store  energy  from  the  envi¬ 
ronment  and  the  need  to  reproduce.  The  more  resources  put  away  for  another 
day  the  better  the  organism  or  organization  can  exploit  tomorrow’s  environment, 
whatever  that  may  be.  However,  the  more  resources  that  can  be  used  today — to 
act  or  to  reproduce — the  better  the  organism  can  most  efficiently  exploit  today’s 
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environment.  In  a  world  of  limited  resources,  an  organism  or  organization  is 
always  faced  with  the  choice,  “Do  I  use  my  resources  today  or  save  them  for 
tomorrow?” 

The  guns  or  butter  tradeoff  comes  from  the  dichotomy  between  the  need  of  the 
organism  or  organization  to  sense  and  respond  to  the  environment  and  the  need  to 
reproduce.  The  more  resources  put  into  systems  that  allow  efficient  ability  to 
maintain  today’s  organism  or  organization — the  guns  that  allow  defense  from 
environmental  threats — the  better  the  existing  organism  or  organization  can  sur¬ 
vive  today.  However,  the  more  resources  put  into  systems  that  allow  effective 
ability  to  build  tomorrow’s  progeny  organism  or  organization — the  “butter”  to 
build  new  infrastructure — the  better  the  progeny  of  the  organism  or  organization 
will  be  able  to  survive  tomorrow.  In  a  world  of  limited  resources,  an  organism  or 
organization  is  always  faced  with  the  choice,  “Do  I  use  my  resources  to  make 
guns  or  butter?” 

The  intelligence  or  operations  tradeoff  comes  from  the  dichotomy  between  the 
need  of  the  organism  or  organization  to  be  able  to  effectively  sense  (observe  and 
orient)  and  to  efficiently  respond  (decide  and  act).  The  more  resources  an  organ¬ 
ism  or  organization  can  use  to  observe  the  world  in  fine  detail  in  many  ways  and 
integrate  those  observations  into  contingency  plans  for  a  wide  variety  of  environ¬ 
ments,  the  better  it  can  make  informed  decisions.  However,  the  more  resources  an 
organism  or  organization  can  use  to  make  rapid  decisions  and  conform  coordi¬ 
nated  actions,  the  better  it  can  exploit  the  environment.  In  a  world  of  limited 
resources,  an  organism  or  organization  is  always  faced  with  the  choice,  “Do  I  use 
my  resources  for  better  intelligence  or  for  more  efficient  operations?”  This  ulti¬ 
mately  translates  into  “Do  I  organize  myself  into  a  network  or  into  a  hierarchy?” 

The  best  kind  of  organization  in  any  case  is  the  one  that  can  best  complete 
Decision  Cycles  that  address  the  three  tradeoffs...  Today  or  tomorrow?  Guns  or 
butter?  Intelligence  or  operations? 

As  we  will  see  shortly,  the  critical  point  in  any  Decision  Cycle  is  the  transition 
from  orienting  to  decisionmaking.  This  depends  on  both  an  accurate  and  com¬ 
plete  internal  map/model  of  the  world  and  the  ability  to  provide  actionable 
options  for  all  foreseeable  futures.  An  organization  that  can  build  and  implement 
the  most  effective  and  efficient  plan  will  be  the  one  that  will  prevail. 

And  we  will  see  that  the  choices  made  by  the  organism  or  organization  not 
only  determine  how  much  of  its  resources  to  allocate  to  intelligence  but  also  what 
kind  of  intelligence  to  value  most...  current  intelligence,  tactical  warning,  or  stra¬ 
tegic  warning. 
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Information  Flow 
in  a  Network 
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In  times  of  stasis  or  equilibrium — 
when  tomorrow’s  world  will  be  the 
same  as  today’s — the  hierarchy  is  bet¬ 
ter.  And  in  times  of  stasis  or  equilib¬ 
rium  only  current  intelligence  is 
needed. 

The  first  possibility  is  that  the  world 
can  be  modeled  as  continuous  and  sin¬ 
gle-valued;  that  is,  changes  will  happen 
only  incrementally  and  there  is  only  one 
possible  output  for  any  given  input.  As 
we  have  seen,  these  are  the  conditions 
under  which  Newtonian  models  apply, 
which  are  inherently  two-player  zero- 
sum-games.  If  an  organism  or  organiza¬ 
tion  can  approximate  its  world  as  a  two- 
player  zero-sum-game  and  can  assume 
that  the  other  player  will  not  change  the 
way  it  is  playing  the  game,  the  comple¬ 
mentarity  conditions  for  Newtonian 
thinking  apply,  and  a  hierarchy  will  pro¬ 
vide  the  best  solution  to  the  three 
tradeoffs. 

Guns  or  butter?  In  a  world  where 
threats  are  well  defined  and  are  not 
expected  to  change  markedly  in  capabil¬ 
ity  or  intent,  a  simple  Newtonian  model 
can  be  made  for  the  threats,  especially 
when  there  is  only  a  single  major  threat. 

Once  that  model  is  made,  it  is  a  two- 

player  zero-sum-game  which  can — after  enough  historical  data  points  have  been 
collected  to  validate  it — be  converted  into  a  “function”  at  which  point  the  future 
can  be  predicted  rather  well.  Once  an  answer  is  obtained,  be  it  “butter  now,” 
“guns  now,”  or  “some  mixture  of  guns  and  butter  now,”  a  single  plan  can  be  built 
for  the  organization.  At  that  point,  the  decision  is  easy  and  all  possible  resources 
should  concentrate  on  implementing  the  plan.  Since  hierarchies  are  best  at  opera¬ 
tions,  a  hierarchy  is  the  best  choice. 

Today  or  tomorrow?  If  a  Newtonian  model  applies  today,  since  it  is  continu¬ 
ous  and  single- valued,  it  will  change  only  incrementally  tomorrow.  If  the  plan  can 
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account  for  any  deviations  from  equilibrium,  such  as  an  incrementally  growing 
arms  race,  the  model  will  not  change  nor  must  the  plan.  Since  tomorrow’s  plan 
will  then  look  much  like  today’s,  the  plan  should  be  made  to  optimize  the  choice 
of  guns  or  butter  for  today — neglecting  tomorrow  because  tomorrow  will  not 
change  enough  to  change  the  plan.  Once  the  plan  has  been  made,  the  hierarchy 
will  implement  it  best. 

Intelligence  or  operations?  Once  the  plan  is  made  in  a  static  world  using  a 
Newtonian  model,  intelligence  is  only  needed  to  check  the  plan  to  look  for  minor 
deviations  that  need  to  be  corrected.  Therefore,  under  such  conditions,  the  bulk  of 
an  organism’s  or  organization’s  resources  should  be  dedicated  to  operations.  In  a 
static  world,  current  intelligence  is  most  critical  to  provide  constant  but  rather 
easily  assessed  feedback  to  ensure  that  things  are  going  according  to  the  plan. 

In  summary: 

■  When  the  world  is  not  changing  and  a  plan  has  already  been  made,  it  is 
best  to  maximize  resources  used  for  operations  to  implement  that  plan. 

A  hierarchy  is  best  to  do  so. 

■  The  organization  in  a  static  world  only  needs  enough  intelligence 
resources  to  monitor  that  the  plan  is  being  implemented  properly. 

■  Current  intelligence  provides  data  to  assess  that  the  current  plan  is  sat¬ 
isfactory  for  current  operations. 

■  In  a  static  world,  current  intelligence  is  all  that  is  needed. 

In  times  of  change —  when  tomorrow ’s  world  will  be  incrementally  different 
from  today’s — a  command  network,  an  organization  that  balances  a  network 
and  a  hierarchy,  is  best.  And  in  times  of  incremental  change  tactical  warning 
becomes  most  important. 

The  second  possibility  is  that  of  a  two  player  model,  quantum  and  multi-state. 
Here  there  arc  only  two  players  in  the  game  but  the  other  player  will  make  deci¬ 
sions  during  the  course  of  the  game.  Since  Newtonian  models  cannot  account  for 
decisionmaking,  these  arc  conditions  that  transcend  Newtonian  models  even  if 
they  are  two-player  zero-sum-games.  In  a  world  where  the  adversary  is  making 
decisions,  as  in  changing  its  plans,  but  those  decisions  are  predictable,  the  organi¬ 
zation  can  include  contingency  plans  within  its  overall  plan.  For  example,  the 
organization  has  assessed  that  the  adversary  will  begin  hostilities  and  has  struc¬ 
tured  itself  to  defeat  the  adversary  when  the  attack  does  come.  Thus  a  plan  was 
constructed  that  accounts  for  operations  prior  to  hostile  action  and  operations 
during  hostile  action.  A  hybrid  organization,  which  we  will  call  a  command  net¬ 
work,  provides  the  best  solution  to  the  three  tradeoffs  under  these  conditions. 
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Guns  or  butter?  Since  the 
adversary’s  overall  plan — hos¬ 
tile  action — is  assessed,  the 
plan  has  already  accounted  for 
a  current  mix  of  guns  and  but¬ 
ter.  Therefore,  resources  are 
best  allocated  toward  imple¬ 
menting  the  plan;  this  is  best 
done  by  a  hierarchy.  However, 
during  the  time  period  prior  to 
the  commencement  of  hostili¬ 
ties,  tactical  warning  is 
needed  to  provide  decision¬ 
makers  options  on  how  best  to 
react  to  the  commencement  of 
hostilities.  Therefore,  a  large 
enough  intelligence  network 
must  be  built  into  the  organi¬ 
zation  to  provide  good  pros¬ 
pects  for  tactical  warning. 

Today  or  tomorrow?  In  this  context,  today  or  tomorrow  is  relevant  mainly 
to  the  moment  that  hostilities  begin.  Therefore,  the  plan  needs  to  consider  mul¬ 
tiple  contingencies  that  include  alternative  actions  dependent  on  when  and 
where  hostilities  commence  as  well  as  the  possibility  of  pre-emptive  strike  as 
an  option  within  the  plan.  However,  under  these  conditions,  all  planning 
becomes  tactical  because  plans  are  made  for  allocation  of  current  resources 
decided  in  the  overall  plan. 

Intelligence  or  operations?  Under  these  conditions,  the  organization  must  be 
flexible.  Since  a  war  is  imminent,  the  organization  must  be  set  up  as  a  hierarchy 
which  is  most  effective  once  the  war  starts — at  which  point  the  situation  reverts 
to  a  two-player- zero-sum  game  with  no  change  in  opponent  plans  (as  long  as  the 
war  is  on)  as  described  above.  However,  until  hostilities  begin  (or  if  the  opponent 
makes  significant  tactical  changes  in  plan  during  the  war),  the  organization  must 
have  the  ability  to  provide  tactical  warning.  During  this  pre-war  phase  at  least,  an 
intelligence  infrastructure  must  be  fielded  to  at  least  answer  the  tactical  questions 
of  when  and  where  the  opponent  will  attack.  Thus,  an  intelligence  network  must 
be  built  which  functions  as  closely  as  possible  to  a  pure  network  to  provide  the 
best  intelligence,  but  within  a  hierarchical  framework  to  be  able  to  support  deci¬ 
sions  and  actions  in  support  of  the  plan. 


Information  Flow  in  a  Hierarchy 
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summary: 


In 

■  When  the  world  will  change  in  a  predictable  way,  i.e.,  beginning  hos¬ 
tilities,  and  a  plan  has  already  been  made,  it  is  best  to  maximize 
resources  for  operations  to  implement  that  plan  but  still  providing 
enough  intelligence  assets  to  be  able  to  implement  the  contingencies 
of  the  plan  most  effectively.  The  best  organization  is  a  command  net¬ 
work  which  is  set  up  as  a  hierarchy  but  which  can  operate  like  a  net¬ 
work  prior  to  decision-points  in  the  plan. 

■  Tactical  warning  provides  data  to  assess  when  contingencies  within 
the  current  plan  must  be  accounted  for  to  support  current  and  future 
operations. 

■  In  a  predictably  changing  world,  tactical  warning  is  needed. 

In  paradigm  shifts,  when  the  assumptions  in  tomorrow’s  thinking  will  be 
backward  from  today’s,  a  network  is  better.  And  in  paradigm  shifts  strategic 
warning  becomes  most  important. 

The  third  possibility  is  that  the  world  can  be  modeled  as  a  quantum  phenome¬ 
non  that  is  multi-state  and  multi-player;  that  is,  changes  will  happen  in  steps, 
there  is  more  than  one  possible  output  for  any  given  input,  and  one  must  account 
for  the  actions  of  multiple  players.  These  are  conditions  that  transcend  both  New¬ 
tonian  models  and  two-player  zero-sunr-games.  Here  the  organism  or  organiza¬ 
tion  needs  to  model  the  world  as  a  multi-player  non-zero-sunr-game  and  must 
assume  that  the  other  players  will  make  decisions  during  the  course  of  the  game 
being  played.  In  the  worst-case  scenario,  all  the  multiple  players  make  plans 
independently  based  on  their  own  guns-or-butter,  today-or-tomorrow,  and  intelli- 
gence-or-operations  tradeoffs,  and  the  organization  must  build  plans  from  intelli¬ 
gence  and  implement  them  knowing  that  all  the  other  players  are  doing  the  same 
simultaneously. 

Guns  or  butter?  In  a  world  of  constant,  quantum  change,  the  organization  is 
only  as  strong  as  its  infrastructure,  and  an  infrastructure  which  can  respond  to  a 
wide  variety  of  conditions  will  be  best.  Since  war-  is  only  one  of  many  possible 
futures  in  such  a  world,  the  organization  that  can  maximize  its  ability  to  build  a 
diverse  infrastructure  will  be  most  effective.  Thus  under  these  conditions  the 
more  “butter”  of  the  most  possible  kinds  the  better,  and  the  closer  the  organiza¬ 
tion  can  be  to  a  network  of  autonomous  diverse  parts,  the  better. 

Today  or  tomorrow?  In  a  world  of  constant,  quantum  change,  tomorrow  will 
be  different  from  today.  Therefore,  any  plans  for  today  will  become  obsolete 
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almost  instantaneously.  A  network  is  needed  to  be  able  to  plan  for  the  most  plau¬ 
sible  contingencies. 

Intelligence  or  operations?  In  a  world  of  constant,  quantum  change,  the  net¬ 
work  is  the  key,  and  the  better  intelligence  the  organization  has,  the  better  it  can 
react  to  the  constantly  changing  world.  Besides,  a  large  and  costly  infrastructure 
required  to  implement  a  long-range  plan  will  likely  become  obsolete  before  it  is 
ever  used.  Thus,  the  best  intelligence  in  such  an  environment  is  one  that  can  cor¬ 
rectly  predict  far  enough  into  the  future  to  provide  decisionmakers  with  the  best 
plan  that  accounts  for  not  only  changes  in  adversary  plans  but  also  the  ability  for 
the  organization  to  be  able  to  reallocate  its  resources  before  the  world  changes. 
When  there  are  multiple  kinds  of  butter  and  guns — any  one  of  which  could  be  the 
most  effective  tomorrow — the  organization  that  can  best  reallocate  its  resources 
will  be  most  effective.  Under  these  conditions,  strategic  warning  becomes  most 
important. 

In  summary: 

■  When  the  world  will  change  constantly  in  a  complex  way,  with  many 
players  constantly  building  and  implementing  plans,  it  is  best  to  maxi¬ 
mize  resources  for  intelligence  to  be  able  to  effectively  build  new 
plans  to  reallocate  resources.  The  best  organization  is  a  network. 

■  Strategic  warning  provides  data  to  assess  when  new  plans  must  be 
built  in  support  of  current  and  future  operations. 

■  In  a  constantly  changing,  complex  world,  strategic  warning  is  the 
variety  needed. 

Is  a  network  or  hierarchy  better?  It  all  depends.  Networks  are  best  at  making 
plans.  Networks  provide  the  best  intelligence  but  cannot  act  in  a  concerted  man¬ 
ner.  Hierarchies  are  best  at  implementing  plans.  Hierarchies  can  act  quickly  and 
efficiently  but  are  flying  blind  most  of  the  time. 

In  a  static  world,  a  hierarchy  is  better  because  making  plans  in  that  envi¬ 
ronment  is  simple,  and  the  organization  can  marshal  its  resources  to  imple¬ 
ment  the  plan. 

In  a  changing  world,  a  network  is  better  because  making  plans  in  that  environ¬ 
ment  is  difficult,  and  the  organization  needs  to  expend  resources  making  contin¬ 
gency  plans...  the  more  complex  the  changing  world,  the  more  complex  the  plans 
need  to  be. 

If  change  is  small  and  can  be  neglected,  the  organization  can  make  a  simple 
plan  and  stick  with  it.  Only  current  intelligence  is  required  to  monitor  the 
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progress  of  that  plan.  If  change  is  small  and  predictable,  the  organization  needs  to 
make  a  plan  with  contingencies  and  look  for  indicators  of  that  change  to  decide 
which  contingencies  to  implement.  Tactical  warning  is  needed  to  provide  those 
indicators.  BUT... 

If  change  is  constant  and  too  great  to  account  for  all  possible  contingencies  in 
a  single  plan,  no  matter  how  complex  the  plan  is,  the  organization  must  be  able  to 
build  a  new  plan  even  while  it  is  executing  the  old.  That  is  what  strategic  warning 
is  all  about. 

Current  U.S.  military  and  IC  organizations  were  built  to  fight  Industrial-Age 
wars.  In  the  Industrial  Age  only  current  intelligence  and  tactical  warning  were 
required  because  strategic  warning  could  be  done  by  the  decisionmakers  them¬ 
selves  without  any  additional  help  from  the  IC : 

■  The  Japanese  bombing  Pearl  Harbor  signaled  a  beginning  of  hostili¬ 
ties.  FDR  could  come  up  with  a  strategic  plan  immediately  to  reallo¬ 
cate  U.S.  resources  from  butter  to  guns. 

■  The  launching  of  Sputnik  signaled  the  beginning  of  a  new  era.  Eisen¬ 
hower  and  the  nation  could  immediately  come  up  with  a  new  strategic 
plan  to  reallocate  U.S.  resources  from  just  butter  to  guns  plus  butter  — 
and  a  standing  “strategic”  force  to  be  on  call  for  instant  reaction  to  any 
Soviet  attack.  But  once  the  new  strategic  plan  was  in  place  and  all  the 
contingencies  of  the  plan  fleshed  out,  the  U.S.  only  needed  tactical 
warning  thereafter  to  assess  and  provide  guidance  at  the  decision- 
points  in  the  plan. 

But  9/11  changed  all  that.  In  a  world  where  multiple  players  are  building 
WMD  and  terrorists  can  attack  anywhere  at  any  time,  how  do  we  build  a  plan  to 
counter  WMD  and  terrorism?  That  requires  strategic  warning,  and  it  appears  that 
strategic  warning  is  impossible  in  a  constantly  changing  multi-player  world. 

Therefore,  we  must  begin  to  do  the  impossible...  Build  an  IC  organization  that 
can  provide  strategic  warning  in  a  world  of  WMD  and  terrorism. 

From  the  Industrial  Age  to  the  Information  Age-A  New  Balance 
between  Intelligence  and  Operations 

The  Decision  Cycle  is  curious  in  that  it  is  advantageous  to  remain  in  the  intel¬ 
ligence  half  (Observe  and  Orient)  for  as  long  as  possible  but  implement  the  oper¬ 
ations  half  (Decide  and  Act)  as  quickly  as  possible.  Building  a  plan  is  best  done 
with  the  maximum  amount  of  information  possible,  so  when  an  organization  is  in 
the  intelligence  half  of  an  OODA  Cycle  it  tends  to  stay  there  as  long  as  possible. 
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However,  once  a  decision  is  made  and  a  plan  is  executed,  it  is  advantageous  to 
complete  the  plan  as  fast  as  possible  because  during  the  operations  half  of  the 
cycle  the  organization  is  essentially  flying  blind. 

One  of  the  basic  lessons  of  Decision  Cycles  is  that  the  organization  that  can 
get  “inside  the  adversary’s  decision  loop”  will  prevail.  In  essence,  if  the  organiza¬ 
tion  can  build  a  plan  based  on  current  assessments  of  the  adversary  and  the  world 
and  complete  that  plan  faster  than  the  adversary,  it  will  get  the  advantage  of  mov¬ 
ing  to  the  next  Decision  Cycle  ahead  of  the  adversary  and  be  able  construct  a  new 
and  better  plan  that  accounts  for  everything  that  has  occurred  during  the  current 
cycle.  Feedback  is  possible  during  a  Decision  Cycle  to  allow  monitoring  to  keep 
the  plan  on  track  or  to  provide  for  contingency  decisions  programmed  into  the 
plan,  but  it  is  only  by  going  to  the  next  Decision  Cycle  that  the  organization  has  a 
clean  slate  to  build  a  new  plan  from  scratch — one  that  can  account  for  everything 
that  happened  during  the  current  cycle. 

Both  current  intelligence  and  tactical  warning  are  reactive.  They  assume  an 
organizational  plan  that  is  in  place  and  being  executed  and  looks  for  indicators 
that  the  plan  is  still  on  track  or  that  contingencies — decision-points — in  the  plan 
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have  been  reached.  “If  they  do  A,  then  we’ll  do  Y,  but  if  they  do  B,  then  we’ll  do 
Z.”  In  either  of  these  modes,  the  decisionmakers  drive  intelligence.  They  already 
have  a  plan,  and  intelligence  provides  a  feedback  loop  to  monitor  that  plan. 
Therefore,  decisionmakers  drive  current  intelligence  and  tactical  warning  by 
defining  the  requirements  of  their  current  plan. 

Strategic  warning  is  proactive.  It  assumes  that  when  the  current  organizational 
plan  runs  its  course,  the  world  will  be  different  and  that  the  new  plan  must  reallo¬ 
cate  current  resources  to  implement  it.  Any  complex  plan  takes  time  to  implement 
and  complete,  and  once  a  decision  is  made  to  implement  a  plan,  it  is  usually  more 
effective  to  complete  that  plan  than  stop  and  redraw  another.  Strategic  warning 
provides  inputs  to  plan  for  the  next  Decision  Cycle.  Therefore,  strategic  warning 
must  ultimately  be  driven  by  analysts. 

But  it’s  even  more  difficult  than  that...  True  strategic  warning  needs  to  plan 
ahead  not  only  into  the  next  Decision  Cycle  but  the  Decision  Cycle  beyond  that! 

In  general — if  it  is  possible  to  generalize  on  this — the  policy  official 
is  probably  most  receptive  to  early,  albeit  tenuous,  warning  in  cases 
where  he  can  take  some  preliminary  action,  such  as  some  diplomatic 
initiative,  without  incurring  any  significant  risk  or  major  commitment 
of  resources.  He  is  not  likely  to  be  so  responsive  if  he  has  to  under¬ 
take  a  redeployment  of  military  forces  or  a  call-up  of  reservists,  par¬ 
ticularly  if  he  believes  that  the  threat  is  not  imminent  or  that  action  on 
our  part  could  lead  to  military  reaction  by  the  adversary  and  an  esca¬ 
lation  of  the  situation.  And  he  probably  will  not  wish  to  be  “warned” 
about  potential  dangers  which  still  appear  remote  and  which  might 
require  a  major  change  of  recently  established  national  policy.29 

Providing  adequate  strategic  warning  requires  first  recognizing  that  the  current 
organization  has  not  allocated  its  resources  properly  to  react  to  the  environment 
or  threat  and  then  requires  formulating  a  plan  to  rebuild  the  organization  to  prop¬ 
erly  react  to  that  environment  or  threat.  It’s  not  good  enough  for  the  strategic  ana¬ 
lyst  to  say,  “We  cannot  meet  the  threat  with  our  current  organization  and 
resources.”  The  strategic  analyst  must  also  provide  a  plan  for  the  next  two  Deci¬ 
sion  Cycles:  the  first  plan  is  for  an  infrastructure  OODA  cycle  that  details  the 
reallocation  of  resources  and  new  organizations  to  manage  what  must  be  built', 
and  the  second  plan  is  an  operational  OODA  cycle  that  details  the  actions  of  the 
new  organization  using  its  new  resources  to  respond  to  the  environment  or  threat 
that  will  exist  after  new  infrastructure  is  in  place. 


29  Grabo,  143. 
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Thus,  strategic  warning  must  entail  a  thorough  understanding  not  only  of  the 
adversary  and  how  his  decisions  will  affect  changes  that  cannot  be  properly 
countered  by  today’s  infrastructure,  but  also  an  understanding  of  the  analyst’s 
own  organization  and  the  possible  decisions  it  can  make  to  reorganize  its  own 
infrastructure.  Current  intelligence  provides  feedback  on  how  the  current  plan 
is  going.  Tactical  intelligence  provides  feedback  on  how  to  implement  a  contin¬ 
gency  plan  within  the  current  plan  to  account  for  new  intelligence  on  the  adver¬ 
sary  or  environment.  Strategic  intelligence  must  provide  “feed-forward”  on 
how  to  build  a  new  plan:  first  a  plan  on  how  to  reallocate  current  resources  into 
a  new  infrastructure,  then  a  plan  on  how  to  use  that  new  infrastructure  in 
responding  to  the  adversary  and  environment.  “Warning  does  not  exist  until  it 
has  been  conveyed  to  the  policymaker,  and  he  must  know  that  he  has  been 
warned.”30 

To  rebuild  the  IC  from  its  Industrial-age  organization  to  a  new  Information-age 
organization  we  must  begin  with  a  new  set  of  assumptions: 

■  In  the  Industrial-age  action  was  the  key  to  success.  In  the  Information 
Age  orienting  will  be  the  key  to  success. 

■  Action  depended  on  the  soldier.  Orienting  depends  on  the  analyst. 

■  Action  is  best  implemented  by  a  hierarchy.  Orienting  is  best  imple¬ 
mented  by  a  network. 

■  Action  is  served  by  current  intelligence  and  tactical  warning  to  insure 
the  success  of  the  current  Decision  Cycle.  Orienting  is  best  served  by 
strategic  warning  to  insure  the  success  of  the  next  Decision  Cycle... 
and  the  one  beyond  that. 

Current  intelligence  and  tactical  warning  tells  the  decisionmaker  what  he 
wants  to  know.  Strategic  warning  tells  the  decisionmaker  what  he  needs  to  know. 


30Grabo,  14. 
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Chapter  8 


MODELING  THE  DECISION  CYCLE 

Biological  Systems  are  defined  by  what  they  do  rather  than  what  they 
are.  Dynamic  models  for  biological  systems  including  organisms  and 
organizations  can  be  built  using  the  Decision  Cycle  or  OODA  Cycle 
developed  by  Col  John  Boyd. 

Amateurs  talk  tactics.  Professionals  talk  logistics. 

Old  Military  Aphorism 

How  do  we  get  there  from  here?  With  all  the  talk  about  “the  database  prob¬ 
lem”  or  “systems  of  systems,”  is  the  world  becoming  too  complex  for  the  human 
brain  to  comprehend?  I  suggest  that  the  world  only  seems  that  complex  because 
we  are  basing  our  worldview  and  thought  processes  on  what  we  learned  in 
school.. .based  on  Newtonian  Science. 

Newtonian  Science  is  based  on  the  notion  of  understanding  the  physical  uni¬ 
verse.  There  has  been  much  thought  and  discussion  to  step  beyond  Newton  to 
build  what  is  been  termed  “chaos  theory”  or  “complexity  theory.”  But  ultimately, 
the  current  notions  of  complexity  science  have  failed  because  they  are  based  on 
Newtonian  assumptions. ..half-a-honeybee... functions  with  no  history.. .and  most 
importantly  no  decisionmaking.  Therein  lies  the  problem. 

Decisions  are  most  usefully  depicted  as  quantal  and  multi-state.  One  can  start 
with  A  and  get  either  B  or  C.  dependent  on  the  environment.  Therefore  any  mod¬ 
eling  of  a  decisionmaking  system  based  on  the  Newtonian  assumptions  that  the 
world  is  continuous  and  single-valued  is  inherently  flawed  and  misleading. 

To  model  a  world  based  on  the  Decision  Cycle  one  needs  to  start  with  a  set  of 
assumptions  that  recognizes  decisions. 

Therefore,  we  need  to  look  more  closely  at  the  Decision  Cycle  and  see  where 
the  complementarity  principle  applies;  that  is,  where  our  Industrial  Age,  New¬ 
tonian  assumptions  approximate  the  real  world  and  where  they  are  woefully 
inadequate. 

If  we  redraw  the  Decision  Cycle  the  way  it  works  in  an  organization,  we  can 
see  not  only  why  Newtonian  thinking  is  limited  for  modeling  the  cycle  but  also 
why  current  technology-based  methods  to  improve  the  intelligence  process 
have  failed. 
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The  Decision  Cycle  exists  not  only  in  the  physical  world  blit  also  in  the  cogni¬ 
tive  or  organizational  world  and  therefore  transcends  Newtonian  thinking.  In  the 
Observation  step  of  the  cycle,  the  observer  interacts  directly  with  the  physical 
world,  performs  measurements  or  senses  physical  entities,  then  converts  the 
physical  reality  into  a  symbolic  representation  of  that  reality.  The  meteorologist 
in  Iceland  in  support  of  D-Day  measured  wind  direction  and  speed,  and  baromet¬ 
ric  pressure  but  passed  the  data  he  collected  in  symbolic  format  (305o@25kt/ 
28.5”Hg).  The  symbolic  data  was  then  passed  to  the  meteorologist  in  England 
who  plotted  all  the  symbols  on  a  map,  which  is  itself  a  symbolic  representation  of 
the  physical  world.  He  then  oriented  and  presented  all  the  data  on  the  weather 
map  to  General  Eisenhower  who  decided  on  the  best  plan  based  on  the  symbolic 
worldview.  Eisenhower  then  passed  the  decision  in  symbolic  form,  “Let’s  go,” 
and  finally  the  operational  part  of  the  organization  took  actions  in  the  physical 
world  which  affected  physical  entities  (the  German  Army  or  the  environment). 
The  input  Observation  and  the  output  Action  relate  the  organizational  world  to 
the  physical  world,  but  the  Orienting  and  Decisionmaking  steps  exist  totally  in  an 
organizational  cognitive  world  based  on  totally  non-Newtonian  symbolic  data, 
maps,  plans,  decisions,  and  orders. 
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Efforts  to  date  to  use  information  technology  have  heavily  concentrated  on  the 
Newtonian  fringes  of  the  Decision  Cycle;  that  is,  the  parts  of  the  Observation  and 
Action  steps  that  occur  in  the  physical  world.  Thus  we  built  physical  systems  to 
answer  questions  about  physical  systems.  How  do  we  build  bigger  and  better  sen¬ 
sors  to  load  more  data  into  databases?  How  can  we  speed  up  our  ability  to  pass 
orders  to  allow  our  operating  forces  to  target  faster?  But  Newton  cannot  help  us 
with  orienting  and  decisionmaking  because  both  only  exist  in  the  cognitive  orga¬ 
nizational  world. 

Both  the  Observer  and  Actor  do  things,  and  technology  based  on  physical 
models  can  help  them  do  things  faster  or  farther  or  stronger.  Industrial- Age  tech¬ 
nology  provided  machine-aided  methods  for  the  Observation  and  Action  steps  of 
the  Decision  Cycle  in  which  the  organization  interacts  with  the  physical  world. 

Both  the  Orienter  and  Decisionmaker  think  things,  and  technology  based  on 
biological  or  cognitive  models  can  help  them  think  more  effectively.  Information- 
Age  technology  will  ultimately  allow  computer-aided  methods  for  the  Orienting 
and  Decisionmaking  steps  of  the  Decision  Cycle  in  which  the  organization  inter¬ 
acts  within  itself  cognitively. 


The  core  of  the  Decision  Cycle  is  making  and  implementing  a  plan. 


Orienting  compares  symbolic  representations  of  the  physical  world  against  a 
symbolic  representation  of  the  world — usually  called  a  map — and  synthesizes 
plans. 

Decisionmaking  selects  which  plan  to  implement. 

The  key  to  Information-Age  Intelligence  and  strategic  warning  is  in  under¬ 
standing  how  both  our  organization  and  an  adversary’s  organization  make  plans 
and  in  how  we  can  make  our  plans  better  than  their  plans. 

■  Better  operations  required  more  efficient  machines. 

■  Better  plans  require  more  effective  thinking. 

In  a  rapidly  changing  world  the  key  is  to  be  able  to  build  an  organization  that 
can  respond  most  effectively  to  the  new  environment.  This  entails  a  strategic  plan 
that  must  span  two  Decision  Cycles:  in  a  Logistics  Cycle  a  plan  is  formulated  and 
implemented  to  reallocate  resources  to  build  a  new  infrastructure,  that  is,  a  plan 
to  change  from  “butter  to  guns”  by  building  a  wartime  economy;  in  the  Opera¬ 
tional  Cycle  a  plan  is  formulated  to  employ  the  new  infrastructure  to  respond  to 
the  environment  in  a  new  way,  that  is,  to  actually  fight  the  war. 


75 


A  journey  of  a  thousand  miles  begins  with  a  single  step. 

Chinese  Proverb 

The  single  step  I  hope  to  accomplish  is  to  be  able  to  build  a  plan  on  how  we 
can  build  better  plans  through  better  strategic  intelligence  using  Information- Age 
technology. 


Lessons  Learned  are  Better  than  Any  Plan 

A  problem  with  evaluating  plans  is  that  one  cannot  truly  tell  how  good  a 
plan  is  until  it  is  actually  implemented.  It  did  not  matter  how  complex  or  exciting 
all  the  tum-of-the -century  plans  were  for  flying  machines,  the  proof  of  the  Wright 
brothers’  plan  was  that  their  aircraft  actually  got  off  the  ground  and  flew.  In  the 
age  of  “vaporware”  where  PowerPoint  slides  of  systems  on  the  drawing  board  are 
touted  as  the  wave  of  the  future,  the  proof  is  in  the  product.  If  a  plan  for  better 
intelligence  is  really  a  better  plan,  then  one  should  be  able  to  demonstrate 
intelligence  products  based  on  that  plan. 

Accordingly,  I  will  demonstrate  by  “lessons  learned”  from  a  conceptual 
prototype  that  I  have  been  building  in  DlA’s  Biological  Warfare  Assessments 
Divisions  along  with  much  help  from  many  members  of  the  IC.  There  are  two 
sections  to  my  strategic  plan  for  Information-age  intelligence:  (1)  The  Methods 
Section  details  a  conceptual  model  for  computer-aided  multidimensional  strategic 
analysis  both  of  target  nations  and  terrorist  groups  and  of  the  IC  itself  to  use  as  a 
basis  for  reorienting  current  thinking  and  current  organizational  dynamics  to 
produce  better  intelligence — especially  strategic  warning;  (2)  The  Case  Studies 
detail  several  implementations  of  that  plan  to  demonstrate  how  the  new 
methodology  can  provide  better  intelligence,  not  only  to  understand  the  adversary’s 
capabilities  but  intent  as  well. 

If  you  think  systematically  and  logically,  read  on  directly. . .  But  if  you’re 
thinking  “Show  me,”  please  read  the  case  studies  first,  and  if  you  feel  you  know 
more  about  WMD  programs  and  how  to  deal  with  them  than  you  have  before,  then 
come  back  and  read  about  how  that  was  done. 
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Assumptions — From  Industrial- Age  Tinkering  to 
Information-Age  Thinking 


The  methodology  to  model  organizational  decisionmaking  cannot  be  built  in  a 
Newtonian  world  and  must  be  built  on  quantum  assumptions.  Accordingly,  before 
I  begin  to  describe  the  methodology,  let  me  briefly  reiterate  my  change  from  the 
Industrial-Age  assumptions  I  am  discarding  to  the  Information-Age  assumptions 
I  will  use. 

From 

Bigger  Faster  Technology  —  The  key  player  on  the  battlefield  is  the  guy  with 
his  finger  on  the  ICBM  launch  button.  IMINT  and  MASINT  are  the  keys  to 
Industrial-Age  targeting 

To 

Smarter  Thinking  —  The  key  player  on  the  battlefield  is  the  guy  on  horseback 
with  the  binoculars,  GPS,  and  laser-pointer.  HUMINT  is  the  key  to  Information- 
Age  targeting.  History  Matters. 

From 

Fighting  against  Technologies  —  Shoot  them  all,  and  you'll  get  the  one  you 
want. 

To 

Out-Thinking  Decisionmakers  —  Only  shoot  the  ones  who  have  decided  to 
shoot  you. 

From 

I  can  project  the  future  from  today’s  function.  Instantaneous  data  mean  instan¬ 
taneous  decisions. 

To 

I  can  project  the  future  only  by  knowing  the  past.  History  Matters! 

From 

Targeting  Objects  —  It  is  “Us”  versus  “Them,”  and  the  World  is  bipolar.  For 
analysis,  one  size  fits  all. 
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To 

Targeting  Individuals  —  It’s  a  multi-polar  world  where  every  nation,  organiza¬ 
tion,  and  individual  has  distinct  goals  and  decisionmaking  processes  to  reach 
those  goals.  For  analysis,  it  all  depends;  context  is  critical. 

From 

Assessment  of  capabilities  built  on  understanding  and  identifying  things — 
weapons  and  the  facilities  that  make  them. 

To 

Assessment  of  intent  built  on  understanding  people  and  the  organizations, 
nations,  and  cultures  they  build — for  it  is  people  who  build  WMD. 

From 

Intelligence  that  is  reactive  built  on  current  intelligence  and  tactical  warning. 

To 

Intelligence  that  is  proactive  built  on  strategic  warning. 

And  finally 

True  strategic  warning  needs  to  plan  ahead  not  only  into  the  next  Decision 
Cycle  but  the  Decision  Cycle  beyond  that! 
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From  Thinking  Tactically  to  Thinking  Strategically 

To  transcend  Newtonian  models  of  the  world,  we  need  to  begin  to  build  new 
models  for  the  world  that  encompass  not  only  the  physical  world  but  the  cogni¬ 
tive  organizational  world  as  well. 
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Intelligence  -  the  Industrial-age  Model 


The  Intelligence  Cycle  —  Now 31 

Current  thinking  in  the  IC  is  linear — both  in  modeling  the  adversary  and  in  the 
model  by  which  the  IC  collects,  collates,  analyzes,  and  presents  finished  intelli¬ 
gence  to  the  customer.  As  indicated  by  Robert  Clark,32  we  need  to  reorient  our 
thinking  to  account  for  the  non-linear  network  aspects  of  the  entire  process.  This 
includes  three  parts:  modeling  the  target  or  adversary,  modeling  ourselves,  and 
modeling  how  we  model.  Any  new  methodology  for  the  Information  Age  must 


31  Robert  M.  Clark,  Model-Based  Predictive  Techniques,  Lecture  at  the  National  Security 
Agency,  2001. 

32  Clark. 
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address  all  three  as  well  as  providing  mechanisms  to  integrate  them  into  a  coher¬ 
ent  whole. 


Network  versus  Network 


Intelligence  -  a  Model  for  the  Information  Age 


The  Intelligence  Cycle  —  Future 33 

Modeling  the  Target:  How  Do  We  Find  Out  the  Adversary’s 

Strategic  Plan? 

It  is  the  history  of  warfare,  and  of  warning,  that  the  extraordinary 
buildup  of  military  force  or  capability  is  often  the  single  most  impor¬ 
tant  and  valid  indication  of  intent.34 

After  9/11,  “extraordinary”  is  a  single  WMD  or  terrorist  act.  This  could  be  a 
single  fermenter  and  crop  duster  or  could  be  a  single  hijacked  airliner.  Unfortu¬ 
nately,  the  IC  now  must  be  able  to  understand  and  model  both  the  capability  and 
intent  prior  to  a  single  “extraordinary”  event. ..in  essence  to  predict  the  “extraordi¬ 
nary”  by  only  being  able  to  know  the  “ordinary.” 

The  precept  that  intelligence  properly  deals  only  with,  or  should  only 
assess,  capabilities  derives,  of  course,  from  the  requirements  of  the 
field  commander.  Confronted  with  military  forces  which  may  attack 
him  or  which  he  is  preparing  to  attack,  it  is  essential  that  the  com¬ 
mander  have  the  most  accurate  possible  assessment  of  the  capabilities 


33  Clark. 

34  Grabo,  22. 
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of  enemy  forces  and  that  he  prepare  his  defenses  or  plan  his  offense 
against  what  the  enemy  is  capable  of  doing  rather  than  attempting  to 
guess  what  he  might  do.35 

The  primary  concern  of  the  warfighter  is  the  capabilities  of  the  adversary.  This 
is  tactical  intelligence. 

The  validity  of  this  concept,  however,  does  not  mean  that  intelligence 
at  the  national  and  strategic  level  should  be  confined  to  the  assess¬ 
ment  of  capabilities.  For  the  fact  is  that  intelligence  at  all  levels,  but 
particularly  that  which  is  prepared  for  the  guidance  of  policy  officials, 
is  expected  to  deal  with  the  question  of  intentions.36 

The  primary  concern  of  the  policymaker  is  the  “question  of  intentions.”  This 
is  the  realm  of  strategic  intelligence. 

When  dealing  with  current  intelligence,  tactical  intelligence,  and  strategic 
intelligence,  the  IC  is  currently  the  weakest  in  providing  strategic  intelligence. 
But  in  the  world  of  WMD  and  terrorism,  that  must  become  our  strength.  I  sug¬ 
gest  the  first  step  in  that  process  is  to  mirror-image  the  adversary  in  a  single 
aspect  of  modeling  that  we  can  exploit  to  turn  a  major  weakness  into  a  major 
strength.  As  indicated  above,  strategic  planning  is  very  difficult  for  us  in  that  it 
requires  two  Decision  Cycles — a  Logistics  Cycle  to  reallocate  resources  toward 
new  programs  and  an  Operational  Cycle  to  implement  that  plan  using  the  new 
infrastructure. 

I  suggest  that  any  strategic  program,  be  it  ours  or  that  of  an  adversary, 
requires  two  cycles  to  implement.  A  WMD  program  is  a  “program”  long  before 
any  weapons  of  mass  destruction  actually  exist.  Every  WMD  program  must  go 
through  a  Logistics  Cycle  to  build  the  weapons  before  it  goes  through  an  Opera¬ 
tional  Cycle  to  employ  them.  Surely  to  build  a  WMD  program  or  to  assemble  a 
terrorist  network  is  strategic  and  requires  first  building  an  infrastructure  to  build 
the  WMD  a  nation  might  employ  or  the  CBRNE  (chemical,  biological,  radiolog¬ 
ical,  nuclear  or  high-explosive)  that  terrorists  might  employ. 

LOGISTICS  IS  THE  QUEEN  OF  BATTLES.  The  extent  and  variety 
of  logistics  preparations  for  modern  war  are  reflected  in  the  number  of 
logistics  and  transportation  items  carried  on  indicator  lists,  which 
equal  or  exceed  the  number  for  any  other  topic.  If  we  could  be  sure  of 


35  Grabo,  17. 

36  Grabo,  18. 
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knowing  the  extent,  level  and  variety  of  logistics  preparations  at  any 
time,  we  would  not  only  have  a  very  accurate  grasp  of  the  adversary’s 
capabilities,  we  would  probably  also  have  very  precise  insight  into  his 
intent.37 

The  key  to  providing  strategic  warning  on  an  adversary  nation’s  WMD  pro¬ 
gram  or  terrorist  network’s  CBRNE  program  is  to  understand  not  only  the 
Operations  Decision  Cycle  but  the  Logistics  Decision  Cycle  that  precedes  it. 
The  logistics  of  research,  development,  production,  and  testing  of  WMD  take 
years,  sometimes  decades,  and  can  be  exploited  to  provide  strategic  warning. 
Logistics  for  any  terrorist  operations  are  identical  but  smaller  scale  and  depen¬ 
dent  on  a  host  nation. 

Step  1  in  building  Warning  Analysis  for  the  Information  Age  is  to  build  a 
methodology  to  model  the  target  that  accounts  for  his  strategic  planning  and  his 
need  for  a  two-cycle  planning  process  to  build  WMD  or  CBRNE. 

Modeling  How  We  Model — How  Can  We  Provide  Strategic  Analysis 
to  Build  Our  Own  Strategic  Plan? 

Having  a  computer  is  like  having  a  clerk  who  can  add  one  plus  one, 
subtract  one  from  one,  and  open  a  drawer  and  tell  you  if  there  is 
something  in  it.  BUT  he  can  do  it  VERY  VERY  fast.38 

Once  we  have  developed  such  a  methodology,  we  need  to  develop  ways  to 
automate  that  method  as  much  as  possible.  BUT,  we  need  to  remember  that  com¬ 
puters  are  tools  that  only  do  exactly  what  we  program  them  to  do.  We  must 
understand  how  we  think  and  build  strategic  intelligence  before  we  can  automate 
it.  I  contend  that  efforts  to  date  to  “solve  the  database  problem”  have  been  flawed 
in  that  they  are  concerned  with  how  to  get  data  into  the  databases,  not  to  get 
information  out. 

Step  2  in  building  Warning  Analysis  for  the  Information  Age  is  to  model  how 
we  think — build  and  test  hypotheses — to  provide  strategic  warning  so  that  we  can 
then  develop  tools  to  help  automate  the  process. 


37  Grabo,  62. 

38  Dr.  William  Tolies,  U.S  Naval  Postgraduate  School,  personal  communication,  1971. 
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Modeling  Ourselves — How  Can  We  Reorient  Our  Intelligence  Process 
to  Empower  the  Warning  Analyst  to  Think  Strategically? 

“Network-centric  warfare  is  not  about  technology.  It  is  an  emerging 
theory  of  war,”  said  U.S.  Navy  Vice  Adm.  (ret.)  Arthur  K.  Cebrowski, 
director  of  the  Pentagon’s  force  transformation  office.  “Power  has 
shifted  to  the  network,”  he  said,  and  away  from  the  Industrial-age 
view  that  power  is  derived  from  mass.  Information,  access  to  it  and 
how  fast  it  is  delivered  now  determines  combat  power...  “Net-centric 
warfare  is  not  about  the  technology,”  an  industry  expert  reaffirmed. 
“People  would  like  to  make  it  about  technology,  because  it’s  easier  to 
get  their  hands  around  it.  This  is  about  the  network  itself — different 
organizations  and  cultures — things  that  make  operations  difficult.  It’s 
about  process — how  to  get  people  to  share  information,  and  how  to 
change  cultures.39 

Once  we  have  a  methodology  for  strategic  analysis  and  the  computer  tools  to 
help  automate  it,  we  need  to  reorient  our  organizations  to  think  cooperatively  to 
provide  strategic  warning.  Much  has  been  said  about  the  shift  to  “net-centric  war¬ 
fare”  and  how  it  can  potentially  revolutionize  the  way  we  fight.  This  concept  is 
another  way  of  verbalizing  what  we  saw  above:  that  in  times  of  massive  change  a 
network  is  more  effective  than  a  hierarchy.  But  the  current  IC  is  based  on  Indus- 
tidal- Age  hierarchical  models  for  information  flow  and  leadership. 

In  the  Industrial  Age,  organizations  developed  to  get  things  done  collectively 
using  technology  based  on  Newtonian  models.  The  Newtonian  paradigm  concen¬ 
trated  on  the  operations  part  of  the  Decision  Cycle  (Decide  and  Act),  and  the  cur¬ 
rent  national  infrastructure  can  act  efficiently  and  almost  instantaneously  when 
decisions  are  made. 

In  the  Information  Age,  organizations  must  be  developed  to  make  strategic 
plans  aided  by  information  technologies,  but  based  on  new  models.  The  new  par¬ 
adigm  must  concentrate  on  the  intelligence  paid  of  the  Decisions  Cycle  (Observe 
and  Orient),  so  that  the  future  national  infrastructure  can  think  effectively  and 
cooperatively  to  provide  the  plans  for  making  those  decisions. 

Step  3  in  building  Warning  Analysis  for  the  Information  Age  is  to  “reorient  the 
arrows”  within  the  IC — both  the  information  flow  and  leadership  interactions — to 


39  William  B.  Scott  and  David  Hughes,  “Nascent  Net-Centric  War  Gains  Pentagon  Toehold” 
Aviation  Week  &  Space  Technology,  27  Jan  2003,  50.  53. 


83 


provide  mechanisms  built  on  Information-Age  thinking  to  be  as  close  to  a  net¬ 
work  as  possible,  when  in  the  intelligence  (Observe  and  Orient)  paid  of  our 
national  Decision  Cycle,  to  provide  strategic  intelligence  and  strategic  warning. 
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Chapter  9 

MODELING  THE  TARGET 

How  do  we  find  out  the  adversary’s  strategic  plan?  Step  1  in  building  Warning 
Analysis  for  the  Information  Age  is  to  build  a  methodology  to  model  the  target 
that  accounts  for  his  strategic  planning  and  his  need  for  a  two  decision-cycle 
planning  process  to  build  WMD  or  CBRNE. 

Modeling  WMD  Networks — The  Problem 

If  the  final  objective  of  warning  analysis  is  the  understanding  of  what  the 
adversary  is  going  to  do,  then  the  knowledge  or  recognition  that  he  has 
decided  to  do  something  is  the  ultimate  achievement...  What  should  be  of 
highest  priority  in  the  analytic  process — the  attempt  to  decide  what  the  adver¬ 
sary  has  decided — is  often  shunted  aside  in  favor  of  mere  factual  reporting  of 
what  is  going  on.  which  is  obviously  much  easier  and  less  controversial.40 

[Multilayer  Chart  drawn  by  Michael  Maskaleris] 

Human  networks  are  distinct  from  electronic  ones.  They  are  not  the 
Internet.  They  are  political  and  emotional  connections  among  people 
who  must  trust  each  other  in  order  to  function,  like  Colombian  drug 
cartels  and  Basque  separatists  and  the  Irish  Republican  Army.  Not  to 
mention  high-seas  pirates,  smugglers  of  illegal  immigrants,  and  rogue 
brokers  of  weapons  of  mass  destruction.41 

WMD  programs  are  networks  built  on  multiple  kinds  of  interactions:  personal 
and  organizational  relationships,  technical  processes  and  flows,  transportation 
and  financial  networks,  and  electronic  connectivity  networks.  These  interactions 
are  often  plotted  as  networks  on  a  chart.  Multilayer  network  diagrams  very  rap¬ 
idly  become  unwieldy  and  incomprehensible  because  they  contain  information  of 
multiple  types  which  is  plotted  with  no  quantitative  relationships  among  the 
nodes  and  distance  or  sequencing  information  in  the  links. 

Visualizing  Networks — the  Dimensionality  and  Complexity  Problems 

Visualization:  The  Problem  of  High  Dimensionality 

■  Humans  can  visualize  very  effectively  in  2  dimensions;  can  identify 
patterns  with  difficulty  in  at  most  5  or  6  dimensions 


40  Grabo,  103. 

41  Joel  Garreau,  “Disconnect  the  Dots,”  Washington  Post,  17  Sep  2001,  Cl. 
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■  Most  low-dimensional  projections  of  high-dimensional  data  are 
Gaussian,  and  therefore  not  very  interesting 

Solution :  find  low-dimensional  views  or  projections  that  are  non- 
Gaussian.42 

The  world  is  6-dimensional  (6-D):  3  dimensions  in  space  (x,  y,  z  or  Lat,  Lon, 
and  altitude),  1  dimension  in  time  (t),  and  2  dimensions  in  energy  (enthalpy  and 
entropy  or  H,  S).  Current  network  models  do  very  well  in  spatial  relationships, 
less  well  in  temporal  relationships,  but  very  rarely  consider  energy  relation¬ 
ships.  Additionally,  complex  systems  are  composed  of  boxes-in-boxes  and  sys- 
tems-of-systems,  so  that  networks  are  also  hierarchical.  This  adds  a  new 
problem  of  “drill-down,”  where  an  individual  node  at  one  level  of  complexity 
can  be  expanded  to  a  network  of  its  own  by  “looking  inside”  the  node.  Accord¬ 
ingly,  a  real-world  network  is  really  at  least  18-dimensional,  being  6-D  at  3  lev¬ 
els  of  complexity  (strategic,  theater,  and  tactical).  To  plot  an  entire  network  one 
can,  at  best,  hope  to  capture  2-D  or  3-D  “cross  sections”  that  are  meaningful 
and  comprehensible  and  which  are  related  in  defined  ways. 

Visualizing  and  Understanding  N-Dimensional  Networks  on 
2-D  Computer  Screens 

I  suggest  a  series  of  axioms  that  will  allow  systematic  construction  of  a  nested 
series  of  network  plots  that  account  for  the  planning  required  to  organize  and 
build  a  WMD  program  or  terrorist  network.  This  formalization  of  dimensionality 
and  complexity  is  designed  to  provide  comprehensible  ways  to  account  for  the 
interrelationships  between  the  plots  and  to  identify  that  a  single  event  is  multi¬ 
dimensional.  Most  importantly,  these  plots  capture  the  planning  and  organization 
required  for  the  overall  program — and  by  showing  the  relationships  of  critical 
personalities  they  implicitly  show  doctrine. 


Axiom:  The  key  to  understanding  the  operation  of  networks  is 
“orienting  the  arrows  ”  rather  than  “connecting  the  dots  ” 


All  biological  systems  are  defined  by  what  they  do,  not  what  they  are.  This 
includes  military-political  systems.  The  essence  that  defines  them  as  biological 


42  Dean  W.  Abbott,  Abbott  Consulting,  Data  Mining:  Level  II,  Class  Handout,  2001.  Cited  here¬ 
after  as  Abbott.  Gaussian  models  are  inherently  Newtonian  and  suffer  from  all  the  limitations  on 
Newtonian  models  described  above. 
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systems  is  that  they  are  organized  to  perform  functions.  Therefore,  in  biology  the 
processes  define  the  structures.  By  concentrating  on  the  structures — be  they  mis¬ 
siles  or  buildings  or  CBW  agents — and  neglecting  the  processes  they  are  used  for, 
the  intelligence  community  has  lost  a  massive  amount  of  very  useful  information 
contained  in  the  reporting. 

Processes  inherently  have  a  direction  and,  therefore,  need  to  be  plotted  as 
arrows  or  vectors  on  a  sequence  chart  (timeline)  or  as  directed  superior/subordi¬ 
nate  relationships  on  an  organization  chart.  Therefore,  to  understand  how  organi¬ 
zations  can  perform  the  processes  required  to  build  and  employ  WMD,  we  must 
orient  the  arrows  rather  than  connect  the  dots. 

Axiom:  Plotting  space,  time,  and  energy  requires  maps,  timelines, 
and  organization  charts. 


The  laws  of  physics  and  chemistry  indicate  that  the  basic  units  of  the  universe 
are  space,  time,  and  energy.  Therefore,  visualization  tools  must  reflect  all  three. 
The  six  units  they  represent  (x,  y,  z,  t,  H,  S)  are  independent  variables  and  are 
therefore  orthogonal  or  perpendicular.  Accordingly,  each  represents  an  indepen¬ 
dent  axis  on  any  visualization  plot. 

■  Maps  define  spatial  relationships  of  entities.  A  plot  of  x  vs.  y,  y  vs.  z, 
or  z  vs.  x  is  a  map.  In  the  IC  we  usually  use  Latitude  (Lat),  Longitude 
(Lon),  and  altitude,  and  for  most  puiposes  altitude  can  be  neglected. 
For  most  IC  puiposes,  one  of  the  “cross-sections”  of  the  n-Dimen- 
sional  (n-D)  network  will  be  a  map  with  x  and  y  axes  of  Lat  and  Lon. 

■  Timelines  define  temporal  relationships  or  sequential  events  in  the 
interactions  of  entities.  A  plot  of  “something”  vs.  t  is  a  timeline.  While 
actual  time  units  may  not  be  important  for  analysis  in  some  cases,  the 
time  sequence  of  events  is  always  important.  For  most  IC  purposes, 
the  second  “cross-section”  of  the  n-D  network  will  be  a  timeline  with 
“something”  on  the  vertical  axis  and  time  sequence — or  series  of 
events — plotted  conventionally  left  to  right. 

■  Organization  charts  define  energy  relationships  among  entities.  The 
energy  organization  of  ideal  gases  is  conventionally  visualized  on  a 
Maxwell-Boltzmann  plot  (see  tonebox)  which  relates  enthalpy  and 
entropy.  For  biological  and  social  organizations  enthalpy  corre¬ 
sponds  to  power  and  entropy  corresponds  to  “degree  of  assembly” 
(see  tonebox).  For  most  IC  puiposes,  the  third  required  “cross-sec¬ 
tion”  of  the  n-D  network  will  be  an  organization  chart  with  increas- 
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Defining  Energy  Relationships  for  Military-Political  Organizations 

Energy  Plots  for  Chemists.  Chemists  define  energy  in  terms  of  enthalpy  and  entropy.  Enthalpy  is  a 
measure  of  bonds  holding  atoms  together  or  of  kinetic  energy  of  moving  molecules;  entropy  is  a 
measure  of  the  “disorder”  of  the  system.  For  the  simplest  possible  chemical  system  -  the  ideal  gas  - 
one  can  visualize  the  energy  distribution  of  its  molecules  using  the  Maxwell- Boltzmann  (M-B)  plot. 

As  shown,  this  plots  the  energy  of  any  one  molecule  on  the  x  axis  versus  the  number  of  molecules 
having  that  energy  on  the  y  axis.  Similar  to  the  more  recognizable  “normal  distribution”  seen  for 
visualization  of  grade  distribution  on  a  test,  the  M-B  plot  shows  that  there  are  a  few  gas  molecules  with 
very  low  energy  or  with  very  high  energy  and  many  with  intermediate  energies.  Additionally,  chemists 
define  “activate n  energy”  as  an  energy  required  fora  molecule  to  undergo  a  chemical  reaction,  and  on 
this  plot  only  those  molecules  that  are  to  the  right  of  the  “activation energy”  line  have  enough  energy 
to  react. 


By  convention 


Enthalpy 


Maxwell -Boltzmann  Plot 


Degree  of  Assembly  (  Entropy  ) 


Organization  Chart 


Energy  Plots  for  Analysts.  An  organization  chart  is  conceptually  the  same  as  a  Maxwell- Boltzmann 
(M-B)  plot  -  although  by  convention  is  rotated  counter-clockwise  ninety  degrees  from  the  M-B  plot. 
In  this  case  the  vertical  axis  measures  the  relative  power  of  a  given  person  -  much  like  the  relative 
energy  of  a  given  molecule  on  the  M-B  plot.  The  horizontal  axis  represents  “degree  of  assembly”  in 
terms  of  the  number  of  individuals  (persons  or  organizational  units)  of  an  equivalent  status  or  rank. 
There  are  implicit  quantitative  characteristics  in  an  organization  chart  that  can  be  defined  ex plicitly  by 
analogy  with  the  chemical  M-B  plot: 

-  A  “decision  energy”  (that  corresponds  to  the  chemist’s  activation  energy)  is  defined  on  the 
vertical  /power  axis  such  that  individuals  above  the  line  have  the  ability  to  make  decisions  that  those 
below  do  not.  For  example,  the  person  at  the  top  can  make  decisions  for  the  entire  organization,  while 
mid-level  persons  can  make  decisions  for  only  their  in  dividual  units.  In  chemistry,  enthalpy  is  a 
measure  of  the  ability  of  an  individual  to  make  or  break  chemical  bonds;  in  analysis,  power  is  a 
measure  of  the  ability  of  an  individual  to  make  decisions  and  have  them  carried  out. 

-  The  number  of  individuals  at  any  given  level  on  the  vertical/power  axis  represents  the 
complexity  of  the  organization  and  the  difficulty  in  assembling  and  maintaining  the  organizational 
structure.  For  example,  an  organization  with  only  two  mid-level  managers  will  be  able  to  perform 
fewer  different  kinds  of  tasks  than  one  with  ten  mid-level  managers  but  will  have  an  easier  time  in 
coordinating  those  tasks.  In  chemistry,  entropy  is  a  measure  of  the  number  of  possible  ways  a  system 
can  be  arranged;  in  analysis,  entropy  or  “degree  of  assembly”  is  a  measure  of  the  number  of  possible 
interactions  required  to  perform  a  task. 
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ing  “power”  plotted  vertically  and  “degree  of  assembly”  plotted 
horizontally. 

Neglecting  the  third  spatial  dimension  (altitude),  6-D  networks  can  be  plotted 
at  a  single  level  of  complexity  with  a  single  set  of  three  plots:  a  map,  a  timeline, 
and  an  organization  chart. 

Axiom:  Biological  and  military-political  systems  can  be  modeled  as  a 
series  of  nested  Decision  Cycles  (OODA  Cycles) 


Biological  systems  are  defined  by  what  they  do  rather  than  what  they  are.  As 
introduced  above  biology  texts  define  “life”  as  the  ability  to:  (1)  extract  and  store 
energy  from  the  environment;  (2)  sense  and  respond  to  the  environment;  (3) 
reproduce;  and  (4)  evolve.  Col  John  Boyd  defined  military  units  by  a  “decision 
cycle,”  or  “OODA  Cycle,”  where  they:  Observe,  Orient,  Decide,  and  Act.  He 
defines  the  military  unit  by  what  it  does,  which  is  totally  consistent  with  the  pro¬ 
cess  definition  of  life.  Also,  note  that  each  of  the  abilities  in  the  biologist’s  defini¬ 
tion  of  life  is  individually  an  OODA  cycle.  Thus  a  basic  visualization  of  any 
biological  or  military-political  system  is  a  timeline. 

In  each  of  these  nested  OODA  Cycles  there  is  a  plan — a  systematic  series  of 
steps  from  conception  (of  what  needs  to  be  done)  through  maturity  (of  actually 
getting  it  done). 


OBSERVE 


Conception 


ORIENT 


-  OODA  ►  —  OODA  ►  -  OODA  ►  -  OODA  ► 


DECIDE 


ACT 


One  can  capture  the  decisionmaking  of  a  biological  organism  or  military-polit¬ 
ical  organization  by  a  timeline  that  captures  the  nested  Decision  Cycles  from  con¬ 
ception  to  maturity. 

Axiom:  The  steps  from  planning  to  completion  of  a  task  can  be 
visualized  on  a  timeline  with  “degree  of  assembly”  plotted  against 
the  time  sequence  of  the  steps  in  assembly. 


The  Second  Law  of  Thermodynamics  states  that  the  entropy  of  the  universe  is 
always  increasing;  that  is,  the  world  as  a  whole  is  always  disassembling  or  falling 
apart.  For  example,  if  one  takes  a  glass  full  of  water  and  drops  it  on  the  floor  it 
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will  “disassemble”  rather  dramatically  as  it  shatters  and  the  pieces  fly  every¬ 
where.  But  it  is  highly  unlikely  that  those  pieces  would,  on  their  own,  assemble 
and  fly  back  into  your  hand.  Thus,  if  one  plotted  the  “degree  of  assembly”  of  the 
world  versus  time,  one  would  see  an  increasing  number  of  possible  states  over  the 
timeline.  Biological  systems  appeal'  to  “beat”  the  Second  Law  by  extracting  and 
using  energy  and  matter  from  the  environment  to  build  new  components  or  sys¬ 
tems.  Similarly,  WMD  programs  collect  energy  and  materials  to  assemble  and 
use  those  weapons.  Therefore,  one  can  visualize  a  WMD  program  by  tracking  the 
assembly  of  the  weapon. 

MISSILE  PROGRAM 


Conception  Maturity 


Missile 

Assembly 


Missile 

Missile 

Testing 

Employment 

Warhead 

Research 

Warhead 

Develop¬ 

ment 

Warhead 

Production 

Engine 

Research 

Engine 

Develop¬ 

ment 

Engine 

Production 

In  the  Program  Timeline: 

■  Time  in  terms  of  sequence  of  steps  is  plotted  left  to  right. 

■  Each  step  in  the  program  is  plotted  as  a  component  process  in  the  overall  plan. 
Note  that  each  step  is  implicitly  an  OODA  cycle. 

■  The  vertical  axis  is  “degree  of  assembly”  where  the  objects  at  each  time  step 
represent  the  number  of  objects  being  manipulated  in  that  part  of  the  program. 
Note  that  many  different  research  projects  are  often  required  for  a  few  devel¬ 
opment  projects  in  one  overall  program  and  that  “degree  of  assembly” 
increases  to  the  right. 

■  Each  program  step  can  be  subdivided  into  its  own  component  program  steps. 

■  The  program  timeline  follows  the  program  from  conception  to  maturity  and 
includes  the  planning  and  Research  and  Development  (R&D)  phases  as  well. 
This  means  that  the  object  of  the  program  may  not  exist  for  most  of  the  pro¬ 
gram;  for  example,  in  a  SCUD  missile  program,  a  SCUD  missile  does  not  exist 
until  the  “missile  assembly”  step. 

Axiom:  In  a  Program  Timeline  each  program  step  can  be 
expanded  to  include  the  input  materials,  energy,  and  personnel 
required  for  its  completion. 
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Biological  systems  extract  energy  and  materials  from  the  environment  and  use 
them  to  build  new  components  or  systems.  Tracking  the  inputs  into  any  process 
step  on  the  Program  Timeline  is  important  because: 

■  The  status  of  the  entire  process  as  well  as  the  characteristics  of  the 
process  can  often  be  deduced  through  knowledge  of  the  inputs.  For 
example,  much  can  be  known  about  a  missile  warhead  factory  by 
knowing:  how  much  electrical  power  it  consumes,  whether  or  not  ura¬ 
nium  or  plutonium  is  among  the  raw  materials,  the  qualifications  of  its 
engineers,  or  the  types  of  equipment  ordered  and  when  they  were 
ordered. 

■  Knowing  the  location  of  the  process  allows  linking  the  Timeline  with 
the  Map. 

■  Knowing  the  personnel  and  their  organizations  allows  linking  the 
Timeline  with  the  Organization  Chart. 


Equipment 


Utilities  (water,  electrical  power) 

Warhead 

Develop- 

Warhead 

Warhead 

ment 

design 

Production 

Completed 

Warhead 


Warhead 

Factory 


All  non-routine  or  unusual  actions  emanating  from  the  national  level 
result  from  some  kind  of  decisions.  They  don’t  just  happen.  This  is 
true  of  both  military  and  political  actions.  When  something  unusual 
occurs,  particularly  something  that  increases  the  adversary’s  capabil¬ 
ity  to  take  military  action  or  is  otherwise  potentially  ominous,  the 
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analyst  should  ask  such  questions  as:  What  does  this  suggest  of  the 
adversary’s  plans?  What  prompted  him  to  do  this?  What  kind  of  deci¬ 
sion  has  been  taken  which  would  account  for  this  action?43 

Biological  systems  require  an  infrastructure  to  accomplish  the  Decision  Cycles 
required  to  extract  energy  from  the  environment,  sense  and  respond  to  the  envi¬ 
ronment,  reproduce,  and  evolve.  Military-political  systems  have  the  same 
requirements  since  they  are  biological  systems.  The  nested  nature  of  the  Decision 
Cycles  that  describe  such  systems  will  also  be  reflected  in  hierarchical  nested 
maps,  timelines,  and  organization  charts  needed  to  describe  them.  For  example, 
the  timeline  for  warhead  production  above  could  be  further  subdivided  to  indicate 
how  the  design,  utilities,  equipment,  and  raw  materials  come  together  to  build  a 
warhead.  Similarly,  the  Organization  Chart  for  the  production  factory  is  nested 
inside  an  organization  chart  for  the  military-industrial  complex  and  could  be  sub¬ 
divided  into  departments  and  divisions  and  even  individual  leaders,  engineers,  or 
workers. 


Axiom:  Program  Timelines  and  Organization  Charts  represent 
orthogonal  visualizations. 


Another  simplistic  approach  to  the  decisionmaking  question,  which 
also  occurs  surprisingly  frequently,  is  to  assume  that  political  and  mil¬ 
itary  decisions  are  taken  by  different  groups  and  are  somehow  not 
related  to  each  other...  This  is  highly  erroneous,  at  least  in  countries 
where  the  national  leadership  exerts  effective  command  and  control 
over  the  military  forces,  and  it  is  particularly  erroneous  where  the 
political  leadership  maintains  a  monopoly  on  the  decisionmaking  pro¬ 
cess  and  the  military  undertakes  virtually  nothing  on  its  own.44 


43  Grabo,  104-105 

44  Grabo,  107. 
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ORGANIZATION 


▼  ▼ 


▼ 


Warhead 

Research 

■ 

Warhead 

Develop¬ 

ment 

■ 

Warhead 

Production 

Engine 

Research 

Engine 

Develop¬ 

ment 

Engine 

Production 

Conception 


MISSILE 

PROGRAM 


1 

r 

3 

r 

Missile 

Missile 

Missile 

Assembly 

■ 

Testing 

■ 

Employment 

Degree  of 

Weapon  Time 

Assembly 

Maturity 


Program  timelines  indicate  a  “degree  of  assembly”  of  the  weapon  in  a  WMD 
program  while  organization  charts  indicate  a  “degree  of  assembly”  of  people  into 
organizations.  These  are  directly  related  in  that  organizations  are  organized  to 
accomplish  specific  goals.  For  example,  for  a  missile  program  the  two  plots  over¬ 
lay  as  shown  above. 

The  Program  Timeline  and  Organization  Chart  are  related  in  that: 

■  The  individual  steps  in  the  Program  Timeline  require  a  specific 
organization  to  plan  and  accomplish  them. 

■  The  individual  organizations  on  the  Organization  Chart  are  arranged 
to  reflect  the  planning  and  coordination  necessary  to  accomplish  the 
specific  tasks. 

■  Overall  coordination  of  any  program  requires  coordination  of  the 
organizations  needed  to  accomplish  its  goals;  therefore,  any  program 
will  require  a  person  who  is  the  overall  leader/coordinator  for  that  pro- 
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gram.  That  person’s  status  will  be  above  the  “decision  energy” 
required  for  the  task. 

In  analysis  of  any  program,  the  Program  Timeline  and  Organization  Chart  pro¬ 
vide  complementary  (orthogonal)  visualizations: 

■  The  Organization  Chart  indicates  the  personal  and  organizational 
interactions  required  for  planning  and  executing  the  program. 

■  The  Program  Timeline  indicates  the  actual  sequence  of  events  in 
accomplishment  of  the  program. 

Axiom:  Organization  Charts,  Program  Timelines,  and  National  Maps 
must  be  used  in  an  integrated  manner  to  track  the  organization  and 
operation  of  networks. 

Additionally,  there  are  two  general  guidelines  that  will  assist  the  ana¬ 
lyst  in  perceiving  the  enemy’s  most  likely  course  of  action  through  a 
fog  of  deception: 

Separate  the  wheat  from  the  chaff.  Weed  out  from  the  mass  of  incom¬ 
ing  material  all  information  of  doubtful  reliability  or  origin  and 
assemble  that  information  which  is  either  known  to  be  true  (the 
“facts”)  or  which  has  come  from  reliable  sources  which  have  no  per¬ 
sonal  axes  to  grind  or  reasons  to  deceive... 

Keep  your  eyes  on  the  hardware.  In  the  end,  the  adversary  must 
launch  operations  with  his  military  forces  and  what  they  do  will  be 
the  ultimate  determinant  of  his  intent.43 

The  objects  and  processes  required  for  the  operation  of  a  network  exist  in  a  6- 
D  world.  Biological  systems  and  organizations  are  different  from  physical  sys¬ 
tems  in  that  they  control  energy  for  tasks  and  programs  that  require  both  planning 
and  coordination  to  accomplish,  and  a  network  of  interacting  parts  is  required  for 
this.  Thus,  visualization  of  biological  and  military-political  networks  requires  a 
concerted  effort  to  capture  this. 

Enthalpy  is  a  measure  of  the  power  stored  in  chemical  bonds.  Thus,  building 
requires  marshaling  energy,  and  WMD  programs  are  basically  building  programs. 
Therefore: 

■  Timelines  must  reflect  the  “building”  that  goes  on  in  the  program  by: 

□  Identifying  the  energy  and  materials  required  to  build  the  components  at 
each  step  of  the  program. 


45  Grabo,  131. 
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□  Identifying  and  fracking  the  final  product  of  the  program — the  weapon. 
(This  is  customarily  done  using  maps.) 

■  Organization  charts  must  reflect  how  an  organization  accomplishes  “building” 
by: 

□  Identifying  and  tracking  the  person  with  the  “decision  energy”  required  to 

coordinate  each  step  in  the  process. 

□  Remembering  that  organizations  work  from  a  plan.  The  organizational 
infrastructure  and  the  timeline  will  be  consistent  with  that  plan. 

Entropy  is  a  measure  of  “degree  of  assembly.”  Biological  systems  apparently 
defy  the  Second  Law  of  Thermodynamics  in  that  they  organize  and  assemble 
rather  than  disorganize  and  disassemble.  Therefore: 

■  Timelines  must  reflect  assembly  over  time  as  the  program  matures. 

■  Organization  Charts  must  reflect  the  assembly  of  people  into  the  functional 
teams  required  for  the  assembly  steps  in  the  program 

Axiom:  Analysis  must  integrate  top-down  and  bottom-up  modeling. 

Complex  systems  are  hierarchical  in  that  they  can  be  described  as  a  series  of 
nested  boxes-in-boxes  or  systems-of-systems.  Every  system  can  be  described  as 
an  individual  with  system  parameters  to  describe  its  behavior  or  as  a  unit  com¬ 
posed  of  smaller  systems  operating  cooperatively. 
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Emergent  Properties — Characteristics  of  Individuals  not  Units 

When  viewed  as  a  unit,  the  system  is  united  but  unitary;  that  is,  it  can  be 
described  as  e  pluribus  unum,  “one  made  of  many.” 

When  viewed  as  an  individual,  the  system  is  indivisible;  it  cannot  be 
broken  down  into  smaller  pieces  without  losing  it  identity.  The  concept  of 
“half-a-fruit-fly”  or  “half-a-carbon-atom”  or  “half  a  missile  assembly 
plant”  is  meaningless. 

Emergent  properties  are  those  which  apply  to  the  system  as  an  individ¬ 
ual.  Smaller  systems  comprise  the  unit,  but  it  is  only  when  they  are  truly 
unitary  and  can  be  treated  as  an  individual  that  a  new  emergent  property 
can  be  defined.  For  example,  the  property  of  life  “emerges”  at  the  cellular 
level;  even  though  the  cell  is  composed  of  a  defined  structure  of  macromol¬ 
ecules,  DNA  and  proteins  cannot  be  described  as  alive,  only  a  cell  can. 
Similarly,  evolution  “emerges”  at  the  species  level;  even  though  species  are 
composed  of  populations  of  individual  organisms,  organisms  individually 
cannot  evolve,  only  species  can.  Accordingly,  there  are  characteristics  of  a 
“baseball  team,”  or  a  “Marine  Corps  company,”  or  a  “missile  assembly 
plant”  that  can  apply  only  as  long  as  the  unit  can  continue  to  function  as  an 
individual  entity. 

Thus  when  describing  a  system,  an  emergent  property  can  only  be 
applied  at  a  given  level  of  complexity  thus  requiring  that  the  system  be 
described  as  an  individual.  Theoretically,  one  could  also  describe  the  sys¬ 
tem  as  a  unit  and  by  applying  an  appropriate  non-linear  model  describe  the 
cooperative  interactions  of  the  smaller  individuals  that  provide  for  the 
emergent  property.  In  practice  it  is  usually  only  feasible  to  model  the  sys¬ 
tem  as  a  unit  (an  integrated  system  comprising  individuals)  to  understand 
why  the  property  emerges,  then  measure  that  property  by  describing  the 
system  as  an  individual.  For  example,  one  could  model  a  warship  using 
the  individual  components — turbines,  pumps,  compressors — and  calculate 
its  top  speed,  turning  radius,  and  other  tactical  characteristics.  But  in  prac¬ 
tice,  it  is  much  more  straightforward  to  take  the  approach  of  Jane’s  Fight¬ 
ing  Ships  and  tabulate  the  top  speed  and  tactical  characteristics  and  use  the 
table  to  describe  the  ships  as  individuals. 
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There  are  two  basic  kinds  of  methodologies  to  model  the  world: 

■  Bottom-up  models  describe  systems  as  units  composed  of  smaller  sub¬ 
systems.  One  catalogs  all  the  different  kinds  of  subsystems  and 
describes  their  interactions,  then  uses  the  characteristics  of  those  inter¬ 
actions  to  describe  the  behavior  of  the  system. 

■  Top-down  models  describe  systems  as  individuals  that  are  indivisible. 
One  measures  the  behavior  of  the  system  as  a  whole  in  multiple  exper¬ 
iments,  then  tabulates  the  properties  that  describe  the  system.  Once  the 
system  function  is  described  it  can  be  subdivided  into  component  sys¬ 
tems  performing  component  processes. 

Bottom-Up  Models  Top-Down  Models 


See  networks  as  objects  connected  by 
lines. 


“Connect  the  dots.” 


The  process  of  model-building  begins 
with  two  objects  that  interact. 


One  builds  a  bottom-up  model  by  add¬ 
ing  new  objects  that  interact  with  those 
objects. 


One  continues  to  assemble  objects 
until  the  unit  is  complete  (and  implic¬ 
itly  is  functional). 


See  networks  as  arrows  connected  by 
objects. 


Orient  the  arrows.” 


The  process  of  model-building  begins 
with  a  single  object  that  reacts  to  an  in¬ 
put  process  to  perform  an  output  process. 


One  builds  a  top-down  model  by  bur¬ 


rowing  within  the  object  to  break  down 
the  initial  process  into  smaller  processes. 


One  continues  to  subdivide  pro¬ 
cesses  until  the  process  cannot  be 
subdivided  further  or  the  objects  are 
indivisible. 
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We  are  more  familiar  with  Bottom-Up  models  not  only  because  most  collec¬ 
tion  is  done  on  given  types  of  objects  but  also  because  the  way  we  reason — using 
English  syntax  is  also  inherently  Bottom-Up. 

Bottom-Up  Models  Top-Down  Models 

Nouns  separated  by  verbs.  Verbs  separated  by  nouns. 


A  syntax  where  objects  act  on  other  A  syntax  of  cause  and  effect — an 
objects.  input  process  causes  an  output 

process. 

Most  models  are  Bottom-Up  models  where  we  observe  the  individual  objects 
that  must  be  assembled  to  form  a  unit.  There  are  only  a  few  models  we  use  often 
that  are  Top-Down  models. 

For  example: 

Bottom-Up  Models 

X-ray  crystallography. 


Experimental  data  are  used  to  model 
structure. 

Can  demonstrate  structure  directly,  but 
can  only  infer  function. 

X-ray  crystallography  can  show 
directly  what  an  enzyme’s  active  site 
is,  but  not  what  is  does. 


Top-Down  Models 

Michaelis-Menten  Enzyme  Kinetics 


Km  ES  Complex  i/max 


E  +  S  ES  E  +  P 


Experimental  data  are  used  to 
model  function. 

Can  demonstrate  function  directly, 
but  can  only  infer  structure. 

Enzyme  kinetics  can  show  directly 
what  an  enzyme’s  active  site  does,  but 
not  what  it  is. 
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The  two  kinds  of  models  are  complementary  but  mutually  exclusive.  In  a  sin¬ 
gle  type  of  experiment  you  can  build  only  one  kind  of  model.  If  you  design  a  Bot- 
tom-Up  experiment,  you  can  determine  structure  and  then  use  the  characteristics 
of  that  structure  to  deduce  what  that  structure  does.  If  you  design  a  Top-Down 
experiment,  you  can  determine  function  and  then  use  the  characteristics  of  that 
function  to  deduce  what  the  structure  must  be. 

For  Bottom-Up  thinking — Structure  determines  Function. 

For  Top-Down  thinking — Function  determines  Structure. 

To  fully  characterize  a  system’s  structure  and  function  you  must  perform  at 
least  two  experiments — at  least  one  bottom- up  and  one  top-down. 

For  the  intelligence  process,  there  are  advantages  and  disadvantages  to  each 
kind  of  model: 

■  A  top-down  model  provides  a  notional  network.  This  is  good  for  col¬ 
lection  planning  but  provides  no  hard  intelligence  by  itself. 

■  A  bottom-up  model  provides  a  real-world  network.  This  provides  hard 
intelligence  but  is  consistent  with  haphazard  collection  planning. 

■  A  top-down  model  tells  you  where  to  look  and  what  to  look  for  but 
cannot  provide  intelligence  until  you  actually  look. 

■  A  bottom-up  model  keeps  track  of  what  you’ve  found  but  cannot  pro¬ 
vide  guidance  on  where  to  look  next. 

What  is  needed  is  an  integrated  approach  that  combines  top-down  and  bottom- 
up  modeling.  Using  a  top-down  model  of  nested  processes  on  a  timeline  or  nested 
organizations  on  an  organization  chart,  one  can  begin  to  fill  in  the  hard  intelli¬ 
gence  by  function  on  the  timeline  or  by  association  on  the  organization  chart. 
This  sorts  the  “puzzle  pieces”  by  type.  The  pieces  of  hard  intelligence  can  then  be 
assembled  bottom-up  in  each  category.  This  kind  of  integrated  approach  can  be 
used  to  build  real-world  networks  and  is  both  good  for  collection  planning  and 
for  assembling  hard  intelligence  into  a  coherent  picture. 

Multidimensional  Analysis — Visualizing  WMD  Networks  in  6-D 

Kathleen  Carley,  director  of  the  Center  for  Computational  Analysis  of 
Social  and  Organizational  Systems  at  Carnegie  Mellon  University, 
says:  “One  of  the  things  that  leads  to  the  ability  to  adapt  is  who  knows 
who  and  who  knows  what.  The  higher  that  is,  the  better  the  group’s 
flexibility.  But  you  can  reduce  the  number  of  times  the  group  can 
communicate  or  congregate.”46 


46  Joel  Garreau,  “Disconnect  the  Dots,”  Washington  Post,  17  Sep  2001,  Cl,  C2. 
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The  integrated  method  described  above,  which  will  be  termed  “Multidimen¬ 
sional  Analysis”  (MDA),  combines  top-down  and  bottom-up  models  and  repre¬ 
sents  those  models  in  6-D  using  maps,  timelines,  and  organization  charts.  Such 
an  approach  has  been  applied  to  strategic  analysis  of  the  North  Korean  BW  pro¬ 
gram,  Russian  biotechnology  program,  and  the  A1  Qaeda  CBRNE  program. 
Results  of  those  analyses  are  presented  as  classified  case  studies,  and  lessons 
learned  from  those  studies  indicate  the  good  prospects  for  a  straightforward 
application  of  Multidimensional  Analysis  to  WMD  and  CBRNE  programs. 

The  lessons  learned  reiterate  the  non-Newtonian  quantum  assumptions  for 
strategic  modeling  of  biological  and  organizational  systems:  History  matters,  and 
people  make  decisions,  so  you  need  to  follow  the  people  to  learn  intent. 

The  methodology  is  based  on  knowing  where  to  look  and  what  to  look  for  in 
detail  based  on  top-down  modeling  and  also  knowing  how  to  build  a  6-D  model 
by  directed  bottom-up  assembly  of  the  collected  data.  What  do  we  look  for? 
Where  do  we  look  for  it?  How  do  we  assemble  it  into  a  multidimensional  model? 

Strategic  Analysis  of  a  WMD  program — What  Do  We  Look  For? 

Multidimensional  analysis  assumes  that  a  WMD  program  is  built  by  people 
and  that  they  interact  within  organizations  as  they  gather  and  assemble  supplies 
and  equipment  to  build  WMD.  Therefore,  we  need  to  look  for  interactions  of  sev¬ 
eral  types  of  entities — people,  places,  things,  and  organizations — in  space,  time, 
and  energy  (both  power  and  organization).  Therefore,  whether  we  think  bottom- 
up  and  connect  the  dots  or  top-down  and  orient  the  arrows,  the  model  will  be  built 
of  nested  entities  and  the  processes  they  perform. 

A  simple  way  to  relate  the  6-D  approach  to  more  familiar  modeling  methods  is 
to  think  of  the  questions  one  asks  when  writing  a  complete  story:  Who?  What? 
When?  Where?  Why?  and  How?  Maps  tell  us  where  the  program  is  and  how  the 
entities  move  to  assemble  the  WMD.  Timelines  tell  us  what  is  needed  to  assem¬ 
ble  the  WMD  and  when  those  assembly  steps  occurred  (or  likely  will  occur). 
Organization  charts  tell  us  who  is  building  the  WMD  and — through  analysis  of 
how  they  are  organized — why  they  are  doing  things  in  a  particular-  way. 

The  Maps,  Timelines,  and  Organization  Charts  we  will  draw  for  a  WMD  or 
CBRNE  program  show  all  the  component  entities  and  processes  performed  by 
those  entities  to  assemble  the  WMD.  Each  plot  is  built  of  nodes  and  links 
between  those  nodes,  but  note  that  on  Maps  and  Organization  Charts  the  nodes 
are  entities  and  the  links  are  processes  but  on  Timelines  the  nodes  are  processes 
and  the  links  are  entities.  Once  the  data  are  plotted  in  those  formats,  we  can  draw 
actionable  intelligence  by  straightforward  analysis  of  the  individual  plots. 
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MAPS:  Where?  How? 

Nodes  =  geographical  entities  —  facilities  and  the  position  of  those  facilities. 

Links  =  transportation  processes  —  transportation  routes.  Here  we  usually 
define  the  routes  by  the  entities  that  do  the  transporting,  e.g.,  trucks,  aircraft,  or 
ships,  and  the  terminal  facilities  for  that  transportation,  e.g.  facilities,  airports, 
ports. 

Maps  identify  interdiction  points  —  Entity  =  facility  to  target;  Link  =  route  to 
interdict. 
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TIMELINE  What? 

When? 


Warhead 

Ran 


Warhead 

Blueprint 


Personnel 

Equipment 

© 

&  Supplies 

T  ransaction 

3en  A  calls  his  agent  Mr.  B 


© 


Vlr.  B  vv  then  releases  funds  *  to  Mr.  C  *-v 

(rt)  »  © 

Vlr.  C  ships  the  warhead  to  Gen  A 

©  A  © 


TIMELINES:  What?  When? 

Nodes  =  critical  processes  in  WMD  fabrication  — research,  development,  pro¬ 
duction,  testing,  and  employment  of  both  the  payload  and  the  delivery  device. 

Links  =  component  entities  in  WMD  fabrication  —  research  provides  proto¬ 
cols  for  development,  development  provides  blueprints  for  production,  produc¬ 
tion  provides  the  payload  or  delivery  device  to  the  assembly  plant,  and  the 
assembly  plant  provides  the  completed  munitions  to  the  forces  in  the  field. 

Timelines  identify  progress  toward  fielding  a  WMD  system.  If  we  know  the 
most  complete  component  produced  to  date,  we  can  estimate  progress  toward 
weaponization.  By  identifying  the  total  number  of  additional  processes  toward 
weaponization,  we  can  estimate  the  time  needed  to  field  a  WMD. 
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ORGANIZATION  CHART  /,lo? 

Why? 


ORGANIZATION  CHARTS:  Who?  Why? 

Nodes  =  critical  organizations  in  WMD  program 

Links  =  tasking  or  funding  or  information  exchange 

Organization  Charts  identify  interrelationships  of  the  organizations  and  peo¬ 
ple  in  the  program.  The  node  that  is  highest  in  organization  is  the  one  in  charge. 
The  node  with  most  links  is  critical  for  procurement,  funding,  or  operations. 

The  key  to  multidimensional  analysis  is  in  building  both  bottom-up  structural 
models  and  top-down  process  models  for  all  the  entities.  A  photograph  or  x-ray 
or  CAT  scan  of  a  person  is  a  structural  model  and  tells  you  who  or  what  the  per¬ 
son  is.  However,  a  resume,  which  is  a  process  model  of  the  same  person,  is  much 
more  valuable  in  assessing  a  person’s  plans  and  intentions  because  it  tells  you 
what  a  person  can  do. 

The  core  of  multidimensional  analysis  is  to  combine  the  conventional  struc¬ 
tural  models  with  process  models,  resumes  if  you  wish.  For  a  person  that  would 
obviously  be  a  resume  (or  a  scientific  resume — a  curriculum  vitae  or  CV).  For  an 
organization  that  would  be  an  organizational  history.  For  a  place  or  thing,  such  as 
a  facility  or  factory,  or  nuclear  warhead  or  missile,  that  would  be  a  project  history. 
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We  need  to  keep  in  mind  that  a  WMD  program  will  exist  long  before  the 
weapon  itself  actually  exists  and  that  the  project  history  begins  with  the  decision 
to  begin  research  on  the  feasibility  of  building  the  weapon. 

FOLLOW  THE  PEOPLE. . .  They  will  lead  you  to  the  projects. 

*  Smart  people  are  needed  to  build  WMD. 

♦  Informal  networks  (Party,  family,  teachers)  can  be  more  important  than 
traditional  chain-of-command. 

♦  S  dentists  and  Engineers  are  specialists.  A  WMD  program  requires  an 
appropriate  mix  of  expertise. 

*  S  dentists  gain  prestige  by  publications  and  presentations. 

Building  a  Curriculum  Vitae  or  Technical  Resume 


With  the  goal  of  building  as  complete  a  resume  as  possible  on  the  key  person¬ 
nel  within  the  WMD  program,  we  can  exploit  many  kinds  of  source  material. 
Examples  here  are  directed  toward  analysis  of  a  state-run  BW  program  although 
similar  reasoning  can  be  applied  to  state-run  chemical  weapons,  nuclear,  or  mis¬ 
sile  programs. 


■  Department  Rosters  —  These  can  sometimes  indicate  links  to  military 
programs. 

■  Company  Brochures  —  These  may  also  indicate  links  to  military. 

■  Resumes  —  Sometimes  these  can  be  obtained  directly. 

■  Curricula  Vitae  (CVs)  —  Academic  scientist  resumes  are  often  posted 
online. 


■  Business  cards  (can  provide  addresses,  phone  numbers,  E-mail). 

■  Catalogs 

■  Publications 


Parsing  a  Scientific  Publication 


\  biologist’s  peisonal  contribution  to  a  project  can  usually  be  determined  by  his/her  place  in  the  list  of 
authors  on  a  scientific  publication. 


FIRST  Author 

SECOND  Author 

OTHER  Author 

In  order  of  importance 


tance 


t/arshavsky,  A.  J.,  Nedospasov,  S.  A.,  Bakayev,  V.  V.,  Bakayeva,  T.  G.,  and  Georgiev,  G.  P. 

Histone-like  proteins  in  the  purified  Escherichia  coli  deoxyribonucleoprotein,  Nucleic  Acids  Res,  4, 2725  (1977). 


MOST  important 


\ 


FIRST  Author  =  Did  most  of  the  experimental  work . 

thor  =  “Expert”  on  the  project. 

LAST  Author  =  The  lab  head  and/or  person  with  the  funding. 

OTHER  Author  =  Did  supporting  work  or  provided  technology  expertise. 


LEAST  important 


IF  the  lab  head  did  most  of  the 
work,  then  he/ she  b  ecomes 
first  auth  or  an  d  last  author  is 
lowest  importance. 
CORRESPONDING  author  is 
usually  the  lab  head. 
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Scientist  resumes  or  CVs  can  be 
pieced  together  by  analysis  of  their 
publications,  conference  presenta¬ 
tions  and  interviews  of  sources  about 
their  career.  Scientists  can  be  suspi¬ 
cious  when  collaborating  on  BW, 
CW  or  nuclear  dual-use  projects  and / 
or  when  linked  to  military  programs. 

■Construct  CVs  by  “Medlining” 

■Expertise  —  What  do  they 
know? 

■Links  —  Where  did  they  learn  it? 
■Who  do  they  know? 

■Publication  record 

■  Did  they  disappear  from  the  literature? 

■  What  did  they  publish  when  they  re-emerged? 

A  prolonged  lack  of  publications  (especially  when  later  publications  are  state- 
of-the-art)  can  indicate  that  a  scientist  has  worked  on  classified  projects. 


Tracking  a  Biologist’s  Career  by  Publications 

Biologists’  careers  can  be  tracked  by  their  publication  records. 

-  A  PhD  student  will  usually  publish  for  3  to  8  years  with  his/her  mentor  or  advisor  as  last 
author. 

-  A  Postdoctoral  Fellow  will  also  usually  include  his/her  advisor  as  senior  (last)  author. 

-  A  Bench  Scientist  will  usually  have  FIRST/SECOND  author  publications  with  advisor 
LAST  for  PhD  and  Postdoc  then  move  to  primarily  LAST  author  papers  when  establishing 
his/her  own  lab. 

-  A  “ Gene  Jockey ”  (Biotechnologist)  will  usually  have  FIRST/SECOND  author  publica¬ 
tions  with  advisor  LAST  for  PhD  and  Postdoc.  Afterwards  he/she  will  have  many  OTHER 
author  publications  with  many  different  LAST  (senior)  authors  indicating  that  he/she  is  pro¬ 
viding  biotechnology  expertise  on  many  different  projects. 

-  A  Biologist  with  many  OTHER  author  publications  with  the  same  LAST  (senior) 
author  is  usually  a  bench  scientist  working  as  a  senior  research  scientist  in  the  lab  of  that 
senior  biologist. 

-  A  talented  biologist  will  have  FIRST  or  SECOND  author  publications  when  a  PhD  stu¬ 
dent  and  Postdoc.  Scientists  with  mostly  OTHER  publications  either  don’t  last  or  end  up 
doing  bench  work  for  someone  else  throughout  their  careers. 


Med.line  (med’lin)  vt.  -lined,  -lining, 
(slang  term  used  by  US  biologists),  to 
reconstruct  a  curriculum  vitae  or 
resume  for  a  biologist  using  the 
online  PubMecl  web  site  from  the 
National  Institute  of  Health  (NIH). 

The  entire  career  of  a  biologist  can 
often  be  reconstructed  by  tracing  all 
his  or  her  publications  online  on 
Pubmed  and  following:  projects 
worked  on,  institutional  affiliations 
including  years  of  first  and  last  pubs 
at  an  institution,  and  coauthors. 
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Building  an  Institutional  Profile 

Any  WMD  program  depends  on  R&D  and  production  facilities,  both  for  the 
BW,  CW,  or  nuclear  payload  and  the  delivery  system.  One  can  track  the  process 
that  occurs  inside  a  technical  facility  by  following  the  inputs  and  outputs  to  that 
facility.  Again  a  BW  facility  will  be  profiled  as  an  example. 

Facilities  associated  with  BW  or  involved  in  dual-use  biological  R&D  can  be 
identified  by  the  biologists  they  employ  and  the  biotechnology  equipment  they 
acquire.  Biotechnology  projects  usually  require  three  different  kinds  of  biological 
expertise:  classical  biologists  who  are  experts  on  the  microorganism,  biotechnol¬ 
ogists  who  are  bioengineering  experts,  and  production  specialists  who  are  experts 
on  growing  large-scale  amounts  of  microorganisms.  The  biotechnology  expertise 
and  biotech  equipment  can  be  significant  when  linked  to  projects  on  microorgan¬ 
isms  that  can  be  used  as  BW  agents  or  bioengineered  into  BW  agents.  Note  that 
the  “Babool  Microbiology  Institute  in  Karjakistan”  can  refer  to  either  an  organi¬ 
zation  or  facility — or  both — dependent  on  the  context. 

Biotechnology  equipment  used  in  BW  or  dual-use  projects  includes: 

■  Genetic  Engineering  R&D 

■  DNA  Synthesizers 

■  PCR  (Polymerase  Chain  Reaction) 

Thermal  Cyclers 

Taq  (Thermus  Aquaticus)  DNA  Polymerase 

■  Large-Scale  Production/Processing  Of  Microorganisms 

■  Fermenters 

■  Bioreactors 

■  Freeze-Dryers 

Assessing  whether  a  facility  or  institution  is  dual-use  or  actually  involved  in  a 
BW  program  can  be  problematic.  There  are  clues  to  determine  if  a  facility  is 
merely  biomedical  or  biological  R&D  or  dual-use  or  BW-associated: 

■  DUAL-USE  FACILITIES 

Declared  under  Biological  Warfare  Convention  (BWC) 

Brochures,  catalogs,  products  can  point  to  dual-use  projects 
Biohazard  Containment  for  infectious  microorganisms 
BL-4  (maximum  containment)  or  BL-3  facilities 
Special  air  handling  systems 

■  BW  FACILITIES  are  usually  associated  with  the  military 

Special  security  measures,  bunkers,  underground  sites 
Military  chain  of  command,  telephone  books 
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Tracking  aBW  or  Dual-Use  Biotechnology  Program 
A  Top-Down  Process  Model 


A  Facility  involved  in  a  BW  or  dual-use  biomedical  program  can  be  characterized  by  projects, 
scientists,  and  equipment  and  supplies. 


Classical  Biologist 

Microbiologist,  Virologist, 
Epidemiologist 


Biotechnology 

Equipment 


Classical 

Pathogen 


— V" 

Agent  S&T  Agfent 

Concept  R&D 


Virulence/  Toxin 
Gene  +  Non¬ 
pathogen 


Agent 

Production 


f* - 


Biotechnology 

Expert 

“Gene  Jockey” 


Biotechnology 

Supplies 


Bio-Production 

Specialist 

Expert  on  fermentation  or 
large-scale  reactions 


Publications 


Bioengineered 
Agent  or  Vaccine 


Strategic  Analysis  of  a  WMD  Program:  Where  Do  We  Look  for  Data? 

Multidimensional  Analysis  is  aimed  at  integrating  top-down  models  of  WMD 
programs  to  provide  the  framework  for  the  kinds  of  data  that  need  to  be  collected, 
and  bottom-up  models  that  take  reporting  and  build  assessments. 

The  top-down  model  provides  a  convenient  tool  for  sorting  data  and  looking 
for  more  related  data.  For  example,  if  a  report  indicates  that  the  “Babool  Microbi¬ 
ology  Institute  of  Karjakistan”  is  involved  in  BW  research,  the  analyst  can  begin 
to  ask  a  series  of  questions: 

■  Who  works  at  the  Institute?  Who  do  Institute  workers  visit  and  talk 
to?  Which  agency  runs  the  Institute?  Which  agency  is  the  parent 
agency  subordinate  to? 

■  What  projects  are  going  on  at  the  Institute?  What  equipment  and  sup¬ 
plies  do  they  order?  What  kinds  of  technical  resources  and  lab  con¬ 
tainment  are  required  to  support  those  projects? 

■  Where  is  the  Institute  located?  Where  are  the  component  structures  of 
the  facility?  Where  do  the  supplies  and  equipment  come  from? 

■  When  was  the  Institute  formed?  When  was  the  facility  built?  When 
were  people  hired?  When  were  the  projects  started? 

■  Whyl  (The  toughest  question.. .which  will  be  addressed  later). 

■  How  are  supplies  brought  into  the  facility?  How  are  products  taken 
from  the  facility? 
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Answers  to  these  specific  types  of  questions  lead  to  asking  new  questions  of 
the  same  kinds.  If  we  find  out  that  Dr.  Boris  Borisovich  works  for  the  Microbiol¬ 
ogy  Institute,  we  can  proceed  as  above,  asking  the  same  kinds  of  questions  about 
him  as  an  individual.  The  same  applies  if  we  find  out  that  the  Microbiology  Insti¬ 
tute  is  housed  in  two  buildings,  one  in  downtown  Babool  and  one  inside  a  fenced 
area  in  the  nearby  army  base  or  if  we  learn  that  the  Microbiology  Institute  is  sub¬ 
ordinate  to  the  Karjakistan  Ministry  of  Health.  We  aim  to  collect  data  to  construct 
resumes  for  all  key  persons,  histories  for  all  nested  organizations,  descriptions 
and  histories  of  all  related  facilities  (places ),  and  histories  of  all  projects  (things). 

Multidimensional  Analysis  is  built  on  the  assumptions  that  context  is  very 
important  for  navigating.  If  I  can  build  a  detailed  “maps”  in  6-D,  and  place  an 
entity  on  those  maps,  I  can  deduce  where  it  came  from  and  where  it’s  going. 
History  matters. 

By  applying  Multidimensional  Analysis  (MDA)  methods  to  several  projects 
(see  Case  Studies),  in  the  author’s  experience  there  were  several  unexpected  les¬ 
sons  learned  about  how  the  different  intelligence  collection  methods — “INTs” — 
support  MDA  and  how  MDA  can  in  turn  support  the  individual  INTs  in  return. 

Human  Intelligence  (HUMINT)  reporting  is  by  far-  the  most  important  data 
source  for  MDA.  All  the  questions  of  who,  what,  when,  where,  why,  and  how  can 
be  asked  to  any  HUMINT  source,  but  we  have  found  that  many  of  the  required 
data  bits  have  already  been  collected  but  remain  in  the  databases  because  they 
were  either  not  valued  or  considered  “too  hard”  to  search  for  and  use.  In  addition, 
the  kinds  of  questions  asked  through  MDA  also  tend  to  mitigate  the  major  prob¬ 
lem  in  WMD  analysis  of  finding  technically  competent  sources. 

For  example,  a  janitor  from  the  Babool  Microbiology  Institute  has  defected. 
By  previous  standards  he  would  be  discounted  as  a  source  because  the  most  criti¬ 
cal  BW-related  questions  such  as  “What  kinds  of  microorganisms  do  they  grow?” 
would  obviously  be  well  beyond  his  expertise.  But  for  MDA  there  are  many  ques¬ 
tions  for  which  he  could  provide  very  valuable  and  reliable  answers.  Who  is  the 
Director  of  the  Institute?  Who  is  your  superior,  and  who  does  he  work  for?  Have 
any  Party  dignitaries  or  military  officers  visited  the  Institute?  Who  did  they 
meet?  Which  labs  did  they  visit?  Whose  name  is  on  the  door  to  those  labs? 
When  you  collect  trash,  are  there  any  rooms  off-limits  for  collection?  Is  there 
any  special  handling  you  do  of  any  trash  or  is  any  put  in  special  kinds  of  plastic 
bags  or  sealed  containers?  Are  there  any  animal  or  plant  facilities  that  need  to  be 
cleaned?  By  thinking  of  building  WMD  as  a  process  mediated  by  people  and 
organizations,  a  multitude  of  questions  can  be  asked  that  a  janitor — or  almost  any 
kind  of  source — can  answer. 
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The  redundancy  of  the  detailed  kinds  of  information  collected  in  support  of 
MDA  also  provides  an  excellent  reliability  check;  both  on  the  data  and  on  the 
sources.  In  the  example  plots  in  the  Figures  above,  General  A  ordered  a  warhead 
through  his  intermediary  Mr.  B .  That  transaction  could  be  validated  from  a  vari¬ 
ety  of  sources: 

■  Phone  intercepts  could  provide  names  and  items  of  discussion. 

■  Recovery  of  phone  numbers  from  either  General  A’s  or  Mr.  B’s  phone- 
book  could  indicate  a  link. 

■  Information  from  a  variety  of  sources  that  General  A  was  the  Director 
of  the  Missile  Coip  and  Mr.  B.  was  associated  with  the  Atomic  Energy 
Commission  would  provide  additional  context. 

■  The  location  of  both  their  offices  as  well  as  the  area  code  for  their 
phones  would  cross-correlate  to  provide  information  on  their  organi¬ 
zations  and  facilities. 

■  Another  phone  conversation  between  Mr.  B.  and  Mr.  C  would  have 
been  followed  by  an  invoice  sent  or  faxed,  a  transfer  of  money,  a 
receipt  for  the  money,  a  receipt  for  the  delivered  item,  and  finally  a 
round  on  interactions  confirming  completion  of  the  order.  Intercept  of 
any  one  of  those,  in  the  appropriate  time  frame,  would  validate  any  of 
the  other  data. 

Note  that  the  reporting  at  this  level  soon  begins  to  cross-validate  source  reli¬ 
ability.  If  the  janitor  in  General  A’s  building  came  forward,  one  could  check 
pieces  of  the  story  against  his  recollections  of  what  office  the  General  worked  in 
during  what  time  period  and  if  he  was  even  in  the  country  at  the  appropriate  time. 
In  short,  MDA  aims  to  collect  data  at  multiple  levels  of  granularity  which  will 
ultimately  cross-validate  and  also,  as  a  spin-off,  usually  can  encounter  something 
that  any  source  with  access — with  any  kind  of  expertise — can  provide  reliably. 
For  an  MDA  analyst,  having  access  to  the  supply  clerk  (like  Radar  O’Reilly  in 
the  MASH  TV  show)  may  as  valuable  as  having  access  to  the  General. 

MDA  also  can  overcome  the  usual  reaction  that  it’s  “too  hard”  to  track  individ¬ 
ual  people.  A  report  on  a  North  Korean  microbiologist  named  Kim  Chong-Ho  is, 
at  first  glance,  impossible  to  track  any  further  since  querying  for  “Kim”  or  “Kim 
Chong”  or  “Dr.  Kim”  in  a  database  will  return  thousands  of  hits — mostly  extrane¬ 
ous.  This  is  compounded  by  the  translation  problem  in  that  his  name  could  also 
be  reported  as  “Kim  Jong-Ho”  or  even  “Kim  Jong-O.”  In  MDA,  the  analyst 
would  likely  note  that  name  when  first  encountered,  and  wait  for  another  link  to 
make  tracking  easier.  For  example,  if  Dr.  Kim  was  linked  to  the  “Yang-Ho 
Anthrax  Institute,”  all  the  reporting  available  on  that  institute  could  be  rechecked 
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for  any  references  to  a  “Dr.  Kim.”  As  more  cross-correlations  become  available, 
re-searching  databases  for  the  correct  person  becomes  easier,  even  though  it  still 
means  having  to  read  through  irrelevant  articles  to  separate  “Dr.  Kim  Chong-Ho, 
the  microbiologist  from  the  Yang-Ho  Anthrax  Institute”  from  “Dr.  Kim  Chong-O, 
the  Army  Colonel  from  the  Yang-Ho  Army  Base.”  The  same  reasoning  goes  for 
separating  or  correlating  institutions  that  have  multiple  possible  name  transla¬ 
tions  such  as  the  “Microbiology  Institute”  vs  “Germ  Research  Center”  vs  “Micro¬ 
biological  Research  Academy.” 

HUMINT-directed  HUMINT  targeting  is  aided  by  using  MDA  because  the 
top-down  approach  provides  a  framework  for  asking  relevant  questions.  By 
knowing  not  only  where  a  source  is  from  but  also  when  he  was  there  and  who  he 
was  in  the  organizational  structure,  questions  can  be  worded  to  confirm  what  is 
already  known  about  his  location  in  the  6-D  model  for  the  program  with  which  he 
is  associated.  For  example,  if  a  source  came  from  the  “Yang-Ho  Anthrax  Insti¬ 
tute,”  he  could  then  be  asked  very  specific  questions  about  “Dr.  Kim  Chong-Ho.” 
Furthermore,  by  having  arrows  already  oriented  with  nothing  on  the  other  end, 
specific  new  questions  can  be  formed  to  probe  for  his  links  in  space,  time,  and 
organization. 

All  leaders  need  some  popular  support  for  their  program,  particularly 
programs  that  ultimately  lead  to  war.  History  shows  that  most  leaders, 
even  those  bent  on  a  course  of  aggression,  rarely  have  made  much  effort 
to  conceal  their  intentions,  and  some  leaders  (for  example.  Hitler  in  Mein 
Kampf)  have  provided  us  with  virtual  blueprints  of  what  they  planned  to 
accomplish.47 

Open-source  Intelligence  (OSINT)  reporting  is,  surprisingly,  the  second 
most  valuable  INT  in  support  of  MDA.  The  interdisciplinary  nature  of  MDA 
means  that  it  requires  a  massive  amount  of  context  directly  or  indirectly  linked  to 
the  target  program.  OSINT  can  provide  much  related  background  data  and  con¬ 
text  when  building  the  6-D  model. 


47  Grabo,  84. 
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This  follows 
directly  from  the 
intelligence 
“bathtub  curve” 
which  states  that 
the  amount  of 
available  intelli¬ 
gence  is  large 
very  early  in  the 
development  of  a 
weapon  and 
almost  as  large 
once  it  is  em¬ 
ployed,  but  that  during  the  development  stages  done  in  classified  programs, 
intelligence  collection  virtually  dries  up.  For  example,  if  an  intelligence 
officer  attended  the  5th  International  Congress  of  Theoretical  Physics  in 
Washington,  DC  in  1938,  he  could  have  had  the  opportunity  to  interact  with 
virtually  every  atomic  scientist  worldwide — from  the  U.S.’s  Enrico  Fermi  and 
Albert  Einstein  to  Germany’s  Werner  Heisenberg — and  could  have  asked 
them  anything  imaginable  about  nuclear  fission.  Of  course,  they  all  disap¬ 
peared  into  classified  atomic  bomb  programs  shortly  thereafter  and  no  easy 
intelligence  would  become  available  until  the  bomb  was  dropped  on 
Hiroshima. 

As  in  this  legendary  case,  the  early  stages  of  any  WMD  program  are  easiest  to 
collect  against  and  even  at  the  “bottom  of  the  bathtub”  the  key  personalities  have 
to  live  their  lives.  Thus,  if  an  analyst  can  identify  the  key  players  in  a  WMD  pro¬ 
gram,  much  intelligence  can  be  gleaned  by  following  the  open-source  data  on 
the  most  prominent  leadership  likely  associated  with  the  program.  During  the 
eclipse  phase,  a  lack  of  specific  data — if  it  is  taken  in  a  proper  context — can  be 
just  as  valuable  as  positive  data.  Also,  if  a  name  is  reported  in  the  eclipse  phase, 
much  valuable  context  can  be  gleaned  by  checking  the  historical  record.  For 
example,  a  report  in  1942  that  Werner  Heisenberg  was  in  charge  of  a  secret  Nazi 
program  could  become  much  clearer  by  reading  his  presentation  at  the  1938 
physics  conference. 

Building  WMD  requires  a  specific  mix  of  personnel:  strategic  senior  leader¬ 
ship  to  oversee  the  program;  technical  personnel  to  research,  develop,  and  build 
the  CW,  BW,  or  nuclear  payload;  and  technically  competent  logistics  personnel  to 
provide  the  infrastructure,  order  all  the  equipment  and  supplies,  and  pay  for  them. 


Stage  of  Weapon  Life  Cycle 

— - - - ► 


Research  Development  Production  Employment 
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OSINT  can  provide  background  data  on  the  technical  personnel — especially 
research  scientists.  In  a  small  nation,  there  are  few  competent  microbiologists, 
chemists,  or  nuclear  physicists  so  that  those  that  are  available  are  either  living 
dual  lives;  that  is,  working  in  both  academic  and  classified  programs,  or  by  leav¬ 
ing  a  track  in  the  open  literature  during  their  training  and  then  subsequently  dis¬ 
appearing  from  open  sources.  Even  then,  they  may  be  absent  from  professional, 
open  or  “gray”  literature  but  remain  visible  in  their  new  role  performing  “valu¬ 
able  service” — of  an  unspecified  kind — to  the  nation.  Similarly,  senior  leadership 
is  always  seen  in  open  sources,  especially  in  Communist  or  totalitarian  nations 
where  the  “privileged”  leaders  are  fodder  for  all  the  propaganda  journals. 

Propaganda  is  a  very  useful  barometer  of  how  concerned  the  coun¬ 
try’s  leadership  is  about  certain  issues...  Most  propaganda  is  “true.” 

Here  we  are  using  “truth”  in  a  relative,  not  absolute  sense.  We  mean 
that  states  cannot  continually  distort  their  objectives  and  policies,  and 
particularly  not  to  their  own  people.  To  put  out  totally  false  statements 
or  misleading  guidance  is  self-defeating  and  will  not  evoke  the 
desired  response.48 

Used  creatively,  there  are  many  ways  that  OSINT  can  provide  meaningful  con¬ 
text  to  model  a  WMD  program  using  MDA. 

■  Coauthorship  on  scientific  publications  or  presentations  can  be  used  to 
link  scientists.  Informal  scientific  collaborations  are  very  important.  A 
publication  by  Dr.  Borisovich  with  a  Russian  coauthor  or  an  acknowl¬ 
edgement  in  the  paper  for  the  Russian  scientist  sending  a  DNA  sample 
is  useful  in  defining  not  only  who  he  knows  but  also  what  they  both 
know.  For  tracking  biologists,  the  Pubmed  online  database  is  very 
valuable  because  it  archives  titles,  authors,  and  usually  abstracts  from 
virtually  every  reputable  biomedical  journal — including  many  in  Rus¬ 
sian  and  Chinese — from  the  1960s  to  the  present. 

■  Visits  to  meetings  and  conferences  can  be  used  to  deduce  similar 
information  and  sometimes  more  if  a  U.S.  scientist  has  talked  with  the 
foreign  scientist  at  the  meeting. 

■  Visits  to  foreign  countries  often  show  up  in  the  open  literature  of  the 
visited  nations.  For  example,  a  visit  by  Karjakistan’s  Dr.  Borisovich  to 
learn  bioengineering  in  Italy,  India,  or  other  Western  nation  is  likely  to 
show  up  on  an  Italian  website  with  meeting  abstracts  or  an  Indian 
website  reporting  research  done  at  the  Indian  institute. 


48Grabo,  91. 
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■  Ceremonial  occasions  can  be  very  valuable  in  assessing  organizational 
relationships.  For  example,  if  the  Premier  of  Karjakistan  visited  the 
Microbiology  Institute  to  present  Dr.  Borisovich  a  medal  for  “valuable 
service”  to  the  nation,  one  would  very  likely  see  that  reported  in  a 
local  journal  listing  all  the  Party  dignitaries  and  important  scientists  in 
attendance,  often  with  a  picture  of  all  concerned  lined  up  in  front  of 
the  building.  Occasions  to  watch  include:  visits  from  important  lead¬ 
ers;  ground  breaking  or  openings  of  new  facilities;  funerals;  exhibi¬ 
tions  or  trade  shows;  and  party  or  holiday  ceremonies.  Attendance  by  a 
scientist  at  a  Party  or  military  ceremony  can  be  very  revealing. 

OSINT-directed  HUMINT  collection  has  the  potential  to  be  very  valuable  as 
the  IC  becomes  more  integrated.  For  example,  analysis  of  biomedical  and  bio¬ 
technology  open  literature  can: 

■  Identify  individuals  suspect  in  biotechnology  proliferation  for  further 
FIUMINT  targeting. 

■  Identify  potential  FIUMINT  sources  in  the  U.S.  who  were  students  or 
collaborators  of  suspect  scientists  who  could  provide  important  back¬ 
ground  on  those  scientist’s  expertise,  travels,  and  other  associates. 

■  Provide  unclassified  evidence  of  proliferation  links  for  use  in 
demarches.  Sometimes  scientific  publications  or  news  reports  will 
indicate  suspect  links  between  nations,  such  as  Russian  scientists 
working  in  Iran,  which  is  consistent  with  classified  intelligence  data; 
the  unclassified  source  could  then  be  used  to  call  the  attention  of  the 
foreign  government  to  the  potential  proliferation  issue  without  having 
to  divulge  classified  sources. 

■  Provide  quick  screening  of  visa  applications  for  suspect  background  in 
BW.  “Medlining”  a  biologist  can  be  done  in  less  than  a  half  hour  in 
most  cases.  Therefore,  a  quick  check  on  open-source  data  can  rapidly 
indicate  whether  a  foreign  scientist  is  suspect  and  requires  additional 
checking  before  granting  a  visa. 

HUMINT-  and  OSINT-driven  IMINT  and  Signals  Intelligence  (SIGINT) 
collection  is  likely  the  most  valuable  byproduct  of  the  MDA  approach.  Much  of 
the  context  required  for  building  the  multidimensional  model  ends  up  on  the  “cut¬ 
ting  room  floor”  and  never  is  included  in  finished  intelligence.  However,  the  rich 
context  can  provide  very  valuable  clues  for  all  the  INTs.  For  example,  IMINT  is 
limited  for  WMD  collection — especially  BW — by  the  dual-use  nature  of  WMD 
facilities.  BW  facilities  are  most  often  indistinguishable  from  other  academic  or 
biomedical  facilities,  which  are  in  turn  virtually  identical  to  schools  and  ware¬ 
houses.  Therefore,  a  sketch  drawn  by  a  defector  on  how  he  walked  or  took  the 
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Open-source  Intelligence  on  Terrorist  CBRNE  Programs 

Surprisingly  OSINT  can  provide  valuable  background  and  context  for 
understanding  terrorist  CBRNE  programs.  Valuable  open  sources  on  the  Global  War 
on  Terrorism  (GWOT)  include : 

News  stories  from  reporters  in-country.  With  the  high  interest  level  on  the 
GWOT,  many  newspapers,  wire  services,  and  TV  networks  have  sent  reporters  close 
to  the  action  who  have  found  unique  data.  Example  -  A  Wall  Street  Journal  reports: 
recovered  a  computer  in  Kabul  safehouse  likely  used  by  A1  Qaeda’s  Dr.  Ayman 
Zawahiri  which  contained  documents  on  building  a  chemical  and  biological  warfare 
program. 

Local  press  reports.  With  worldwide  interest  in  the  GWOT,  press  coverage  in 
regions  in  which  the  U.S.  has  few  collection  resources  can  help  fill  in  the  blanks. 
Example  -  in  trials  in  Malaysia  and  Indonesia,  including  the  recent  one  for  the 
suspect  Bali  bombers,  the  suspects  have  testified  about  links  between  Jemaah 
Islamiah  (JI)  and  A1  Qaeda,  named  the  leaders  involved,  and  identified  personnel  who 
trained  in  A1  Qaeda  camps  in  Afghanistan.  Such  news  reports  are  posted  on  the 
Lexis/Nexis  database  and  often  can  be  found  online  on  the  newspapers’  websites. 

Official  Government  statements  or  leaked  official  reports.  When  persons  are 
detained  for  questioning  in  the  GWOT,  local  officials  usually  will  release  information 
on  those  detentions  and  sometimes  other  officials  will  talk  off-the-record  to  local 
reporters.  Again,  these  will  appear  in  local  press.  Example  -  Pakistani  government 
officials  released  statements  on  captured  A1  Qaeda  members  and  on  questioning  of 
suspect  A1  Qaeda-linked  nuclear  scientists  and  physicians;  Malaysian  and  Indonesian 
police  released  reports  on  suspect  JI  terrorists. 


train  from  his  house  to  visit  or  work  at  a  suspect  facility  or  a  propaganda  news 
photo  of  dignitaries  lined  up  in  front  of  a  suspect  facility  could  allow  an  imagery 
analyst  to  find  that  facility.  Similarly,  as  mentioned  above,  identification  that 
General  “Joe”  A  heads  the  Missile  Corps  in  City  S  and  Mr.  “Bob”  B  works  for  the 
Atomic  Energy  Commission  in  City  A  through  HUMINT  and/or  OSINT  could  be 
very  valuable  to  a  SIGINT  analyst  who  intercepts  conversations  between  “Joe” 
and  “Bob”  about  “special  shipments”  where  the  phones  at  each  end  are  in  the  cor¬ 
rect  cities  for  the  two  offices. 

Strategic  Analysis  of  a  WMD  Program — How  do  we  assemble  all  the 
data  into  a  multi-dimensional  model? 

The  kinds  and  amount  of  data  that  can  potentially  be  used  in  a  multidimen¬ 
sional  analysis  of  a  WMD  program  is  enormous.  At  first  glance  it  appears  that 
enormous  computing  power  plus  new  kinds  of  “data-mining”  tools  are  necessary 
because  of  the  NIMD  challenge,  “How  do  we  extract  Novel  Intelligence  from 
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Massive  Data?”  However,  the  Case  Studies,  done  using  only  MS  Word  and  Pow¬ 
erPoint  as  data-management  tools,  have  indicated  that  MDA  can  surmount  both 
NIMD  challenges,  massive  quantities  of  data  and  too  much  dimensionality  to  the 
data,  mainly  due  to  the  top-down  approach. 

The  top-down  modeling  inherent  in  MDA  is  a  way  to  turn  perceived 
weaknesses  of  the  NIMD  challenge  into  strengths — mainly  by  transcending 
Newtonian  assumptions. 

WMD  or  CBRNE  programs  are  strategic  programs  and,  as  described  above, 
require  the  nation  or  terrorist  organization  to  formulate  and  implement  a  plan  that 
projects  ahead  two  OODA  Cycles — a  Logistics  Cycle  to  build  the  weapons  and 
an  Operations  Cycle  to  field  and  potentially  employ  them.  In  the  Logistics  Cycle, 
the  order  required  to  build  organizations  to  assemble  WMD  or  CBRNE  means 
that  the  plan  must  be  implemented  and  remain  valid  for  the  years  or  decades  it 
takes  to  go  from  conception  of  the  plan  to  maturation  of  the  infrastructure  to  build 
the  WMD  or  CBRNE  weapons,  to  the  implementation  of  the  plan  and  fielding  of 
the  weapons  using  that  new  infrastructure.  Therefore,  the  long-range  planning 
required  in  any  WMD  program  is  its  greatest  vulnerability  to  intelligence  analy¬ 
sis.  Hence  the  more  “massive”  the  historical  data  set,  the  better. 

Additionally,  while  the  prob¬ 
lem  of  dual-use  in  all  WMD 
programs  complicates  the  anal¬ 
ysis  problem  for  WMD  versus 
conventional  programs,  the 
dual-use  nature  of  the  pro¬ 
grams  means  that  considerably 
more  data  are  available  on 
those  programs  than  might  be 
expected.  Much  of  a  WMD 
program  may  be  “hidden  in 
plain  sight”  either  because  the 
dual-use  really  does  imply  two 
uses — that  the  microbiologist 
is  making  both  the  vaccine  for 
legitimate  health  care  as  well 
as  the  BW  agent — or  is  a  result 
of  denial  and  deception.  In 
either  case,  data  are  available 
even  if  it  is  hard  to  interpret. 


BW  Program  Vulnerabilities  to 
Multidimensional  Analysis 

•  Building  biological  weapons  requires 
planning  that  spans  the  entire 
organizational  infrastructure.  Leadership 
must  coordinate  people  and  organizations 
that  normally  do  not  interact. 

•  Key  personnel  include:  strategic 
leadership,  operational  leadership, 
technical  support,  and  logistics  support. 

•  Materials  and  supplies  need  to  be 
transported  among  facilities. 

•  Key  persons  in  a  BW  program  are 
professionals  and  usually  travel. 

•  BW  technology  is  virtually  all  dual-use. 

•  Research  phase  of  weapon  life  cycle  is 
open-source. 
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Again,  more  data  means  a  better  6-D  model  which  will  be  more  interpretable 
given  more  data. 

On  the  other  hand,  the  dimensionality  of  the  data  makes  its  interpretation  prob¬ 
lematic.  But  if  the  methodology  for  building  the  6-D  hierarchical  model  is 
straightforward,  no  matter  how  tedious  it  is,  it  will  with  persistence  provide  better 
assessments. 


Reconstructing  a  Proliferation  Network 

The  first  step  in  using  MDA  to  develop  a  6-D  model  for  a  WMD  program  is  to 
construct  a  rough  flow  chart  or  timeline  for  the  process  to  account  for  the 
required  steps  in  assembling  the  weapon.  For  example,  any  nuclear  weapons 
program  depends  on  the  acquisition  of  fissionable  materials,  so  any  flow  chart 
for  a  nuclear  weapons  program  must  include  either  uranium  enrichment  or  plu¬ 
tonium  recycling  from  spent  reactor  fuel  or  alternative  methods  to  buy  or  steal 
the  purified  elements. 

Once  the  basic  timeline  is  roughed  out,  a  postulated  organizational  chart  is 
constructed  to  account  for  all  the  technical,  logistics,  and  operational  skills 
required  to  assemble  the  weapon.  Again,  the  organization  may  do  its  own 
research  on  WMD  payloads  or  attempt  to  buy  or  steal  components;  the  rough 
chart  must  account  for  all  possibilities.  Any  intelligence  that  is  currently  available 
is  then  assessed  and  a  very  rough  analysis  is  begun  by  ascribing  individual  “fac¬ 
toids”  to  a  specific  process  on  the  timeline  and/or  the  organization  that  is  respon¬ 
sible  for  that  process  on  the  organization  chart.  The  aim  at  this  point  is  to  be  able 
to  link  key  personnel  or  key  organizations  with  steps  on  the  WMD  timeline.  The 
timeline  will  certainly  have  many  gaps  at  this  point.  Flowever,  if  only  a  few  key 
events  on  the  timeline  and  the  associated  personnel  and  organizations  can  be 
identified,  these  few  entities  can  be  used  as  seeds  to  begin  to  build  the  6-D  model. 
Once  a  few  personnel  and  organizations  have  been  identified,  resumes  or  organi¬ 
zational  histories  are  constructed  on  them.  Flopefully  the  timelines  produced  will 
identify  a  few  links  in  the  overall  timeline  and  organizational  chart.  Note  that 
maps  are  not  very  helpful  at  this  stage  because  the  interactions  found  arc  likely  to 
be  separated  widely  in  both  time  and  space. 


116 


Basic  Template  for  Multidimensional  Analysis  of  a  BW  Program 


Research  _k>  Development  Production  ■  .  Employment 


TIMELINE 


When  the  first  pass  at  the  known  entities  is  complete,  a  systematic  method  to 
build  the  overall  6-D  model  is  employed — based  on  the  intelligence  “bathtub” 
curve.  Since  it  is  very  likely  that  most  data  can  be  obtained  about  the  first  and  last 
steps  in  the  overall  process  and  about  the  most  visible  leadership,  those  entities 
are  targeted  and  the  organizational  infrastructure  is  investigated  in  detail — with¬ 
out  much  regard  to  whether  the  data  are  directly  linked  to  WMD.  For  example: 

■  If  it  was  determined  that  the  Babool  Microbiology  Institute  was  poten¬ 
tially  involved  in  BW,  its  history  would  be  built  to  include  as  many 
personnel  and  projects  as  could  be  determined  from  all  sources. 

■  If  it  was  learned  that  the  Institute  was  subordinate  to  the  Karjakistan 
Ministry  of  Health,  a  history  would  be  built  on  the  Ministry,  to  include 
its  subordination,  leadership,  and  its  subordinate  organizations. 
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■  If  it  was  learned  that  the  Karjakistani  Army  employs  SCUD  missiles 
(which  have  been  reported  to  be  CW-  or  BW-capable  in  other  nations, 
a  rough  history  of  the  Karjakistani  SCUD  program  would  be  built  to 
determine  when  the  program  started,  if  the  missiles  are  home-built  or 
bought,  and  any  indications  of  which  military  units  employ  them. 

The  aim  of  the  MDA  at  this  point  is  to  begin  to  fill  in  the  overall  diagram  to 
provide  context  for  the  national  organization.  One  begins  by  studying  entities 
top-down  by  looking  for  the  processes  they  are  involved  in,  such  as  dual-use 
research  or  procurement  of  missile  systems.  As  reports  are  found  and  a  resume  or 
entity  history  is  built,  one  can  begin  bottom-up  modeling  to  assemble  the  subor¬ 
dinate  entities  into  a  unit,  where  the  focus  is  on  scientists,  equipment,  materials, 
and  processes  occurring  inside  a  particular  facility.  Every  time  any  entity  is  char¬ 
acterized,  its  6-D  model  will  provide  clues  on  where  to  look  next  since  one  can 
either  drill  down  to  its  subordinate  entities  and  processes  or  build  up  the  more 
general  process  and  organization  of  which  it  is  a  part. 


Multidimensional  Analysis  of  WMD  Programs  -  Lessons  Learned 

•  FOLLOW  THE  PEOPLE . . .  They  will  lead  you  to  the  projects. 

•  Resumes  of  key  people  are  critical. 

•  HISTORY  IS  IMPORTANT...  You  cannot  know  where  they’re  going 
until  you  know  where  they’ve  been. 

•  Relationship  of  organizational  chart  to  timeline  is  critical. 

•  Facilities  are  processes  on  a  timeline  as  well  as  boxes  that  enclose 
organizations. 


The  major  lesson  learned  from  using  MDA  on  several  BW  and  CBRNE  pro¬ 
grams  is  that  Multidimensional  Analysis  techniques  are  not  difficult  and  they  do 
not  require  extensive  computing  power.  BUT  they  are  tedious  because  one  needs 
to  build  an  entire  overview  of  the  target  nation’s  infrastructure  and  leadership  to 
pick  out  the  parts  that  are  involved  in  WMD  or  CBRNE.  AND  they  take  an  enor¬ 
mous  amount  of  time  and  reading.  For  example,  the  MDA  project  on  North 
Korean  BW  has  been  in  place  for  almost  three  years  and  a  first  pass  at  all  the  per¬ 
tinent  reporting  has  not  yet  been  completed.  However,  the  benefits  are  already 
great.  From  the  detailed  6-D  model  the  warning  analyst  using  MDA  can  do  sev¬ 
eral  things  that  conventional  methodologies  have  difficulty  doing. 
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Multidimensional  Analysis  for  Strategic  Warning  in  a 
World  of  WMD  and  Terrorism 


MDA  can  provide  strategic  warning  in  a  world  of  WMD  and  terrorism. 
Since  a  timeline  is  the  core  plot  of  MDA,  by  building  knowledge  of  where  the 
WMD  program  came  from  and  when  key  events  happened  in  the  past,  the  warn¬ 
ing  analyst  can  provide  critical  assessments  of  where  it  might  go  in  the  future. 
Most  importantly,  MDA  can  provide  warning  on  a  WMD  program  before  the 
weapons  are  actually  built;  that  is,  it  can  provide  intelligence  on  what  the 
adversary’s  new  strategic  infrastructure  will  look  like  before  it  is  built.  In  short, 
using  MDA,  a  warning  analyst  can  give  strategic  warning — even  in  a  world  of 
WMD  and  terrorism. 

MDA  can  provide  very  specific  information  for  targeting  collection.  As 
described  above,  feedback  to  collectors  is  critical  for  building  a  complete  6-D 
model,  and  the  detailed  model  of  every  entity  in  the  model  provides  context  for 
new  collection. 

MDA  can  provide  specific  assessments  on  intelligence  gaps.  In  MDA,  intelli¬ 
gence  gaps  become  very  clear.  Entities  that  are  virtually  unfilled — large  holes — 
on  the  6-D  models  are  cause  for  concern.  However,  as  the  model  fills  up  around 
them,  the  analyst  can  construct  a  rather  detailed  model  of  what  needs  to  be  col¬ 
lected.  For  example,  if  the  Babool  Microbiology  Institute  was  built  in  1984  and 
research  began  there  on  anthrax  in  collaboration  with  Dr.  Borisovich  the  next 
year,  one  can  project  that  somewhere  in  the  late  1980s  one  can  look  for  efforts  to 
build  production  fermenters — either  by  the  military  or  for  biopesticides  or  for 
vaccines.  Projecting  forward  or  back  in  time — either  for  projects  along  the  time¬ 
line  or  for  key  personnel  up  or  down  the  organizational  ladder — can  be  very  use¬ 
ful  in  determining  where  to  look  next  to  fill  the  gaps. 

...  it  is  usually  more  important  to  understand  the  strategic  importance 
of  the  particular  issue  to  the  nation  than  it  is  to  place  undue  weight  on 
traditional  behavior  and  priorities.49 

MDA  can  also  provide  a  mechanism  to  help  screen  out  mirror-imaging  in 
assessments  or  relying  on  remembered  thoughts  on  a  nation’s  priorities,  and  by 
doing  so,  it  gives  some  indication  of  whether  gaps  are  really  gaps  or  something 
else.  For  example,  we  might  assess  that  a  nation  would  be  stupid  to  use  manned 
aircraft  to  deliver  BW  agents  over  a  battlefield  and  that  covert  employment  by 
Special  Forces  might  be  a  better  way  to  attack  U.S.  troops  in  the  field.  If  there  is 
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reporting  to  fill  in  the  “aircraft  delivery”  process  on  the  timeline  but  none  on  the 
Special  Forces  delivery  process,  it  could  be  assessed  as  (1)  a  gap  in  intelligence, 
(2)  excellent  denial  and  deception  by  the  adversary,  or  (3)  a  true  lack  of  Special 
Forces  delivery.  In  MDA  the  analyst  can  begin  to  assess  which  is  true  by  related 
organizational  or  personal  data  such  as  aircraft  unit  training  in  suicide  operations, 
vaccinations  for  some  units  but  not  others,  visits  by  biologists  to  certain  units,  or 
subordination  of  either  unit  to  strategic  commands  rather  than  the  normal  tactical 
channels.  Given  the  multiple  linkages  in  time  and  organization  of  any  paid  of  a 
WMD  program  to  another,  some  kind  of  linkage  should  become  available  even 
given  denial  and  deception. 

Power  talks.  Realistic  descriptions  of  the  buildup  of  military  power 
often  convey  a  better  sense  of  the  likelihood  of  action  than  will  a 
series  of  estimative  judgments  which  fail  to  include  the  military 
details  or  reasons  on  which  the  assessment  is  based.  To  understand 
the  capability,  and  to  be  able  to  view  it  objectively,  is  a  prerequisite  to 
the  understanding  of  intent.50 

MDA  can  help  assess  “Why?”  “Who?”  “What?”  “When?”  “Where?” 
“Why?”  and  “Flow?”  Conventional  methods  of  intelligence  analysis  that  concen¬ 
trate  on  weaponry  and  facilities  can  address  “What”  and  “Where,”  but  have  diffi¬ 
culty  in  assessing  the  rest.  We  have  shown  MDA  can  directly  address  all  the 
remaining  questions  required  to  write  a  good  story  except  “Why?” 

Assessing  “Why”  is  clearly  the  most  difficult  question  for  any  warning  analyst 
because  it  requires  “getting  inside  the  adversary’s  head”  to  deduce  his  or  her 
intentions.  The  major  difficulty  lies  in  that  currently  any  assessment  of  intent 
must  be  built  totally  on  others’  assessments  of  intent.  Usually  assessments  of 
intent  come  from  a  source  stating  that  he  heard  the  target  leader  say  something. 
Even  if  the  statement  was,  “I  plan  to  build  a  BW  program,”  the  statement  may  not 
provide  a  true  assessment:  the  source  may  have  heard  a  statement  that  was  differ¬ 
ent  and  interpreted  to  be  the  one  given;  or  the  leader  could  have  uttered  the  state¬ 
ment  but  not  meant  what  he  said;  or  the  leader  could  have  meant  what  he  said  but 
may  not  have  been  able  to  make  good  on  the  plan  for  many  reasons. 

While  MDA  does  account  for  such  statements  in  building  assessments,  it  also 
can  provide  independent  assessment  of  the  intent.  If  the  leader  really  was  going 
to  build  a  BW  program,  those  words  would  produce  many  more  words  in  many 
different  venues  involving  planning  conferences  followed  by  organizational 
meetings... straight  through  all  the  steps  in  the  timeline.  Was  the  statement  made 
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at  an  appropriate  place  in  the  timeline?  Were  those  present  the  appropriate  lead¬ 
ers  in  the  organization  which  would  carry  out  the  order?  Most  important,  does 
the  infrastructure  provide  the  capability  assessed  and  is  that  capability  consistent 
with  a  plan  and  the  historical  record  of  how  the  program  was  built? 

MDA  can  assess  intent  by  actions  rather  than  words.  By  building  a  timeline  for 
a  potential  WMD  program  one  can  project  dual-use  agent  or  payload  programs 
with  parallel  munitions  programs  and  later  compare  production  and  employment 
reporting  with  previous  knowledge  on  how  the  project  did  the  R&D  for  the 
assessed  weapons  and  with  present  knowledge  of  how  the  project  is  doing  the 
R&D  for  the  next  generation  of  weapons. 

All  those  processes  require  planning.  Planning  shows  intent.  Assessing 
intent — “why”  someone  is  doing  something — is  crucial  to  strategic  warning. 
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Chapter  10 


MODELING  HOW  WE  MODEL 

How  can  we  provide  strategic  analysis  to  build  our  own  strategic  plan?  Step  2 
in  building  Warning  Analysis  for  the  Information  Age  is  to  model  how  we  think 
— build  and  test  hypotheses — to  provide  strategic  warning  so  that  we  can  then 
develop  tools  to  help  automate  the  process. 

From  Responding  Faster  to  Thinking  Smarter — Strategic  Analysis 

for  the  Information  Age 

Our  U.S.  defense  strategy  seeks  new  levels  of  effectiveness  by  harnessing 
the  power  of  advanced  technologies.  A  central  premise  to  future  military 
strategy  is  the  formation  of  a  system  of  systems  (SOS)  to  attain  dominant 
battlespace  knowledge.  By  coalescing  data  from  collection  and  process¬ 
ing  systems,  the  resulting  information  can  be  integrated  with  systems  of 
weaponry  and  warriors  for  a  seamless  sensor-to-shooter  flow.  Linking 
these  with  the  capabilities  of  maneuver,  strike,  logistics,  and  protection 
will  allow  decisionmakers  at  every  level  to  respond  significantly  faster 
than  any  adversary  and  in  any  operational  situation.51 

Virtually  every  discussion  of  “harnessing  the  power  of  advanced  technologies” 
ultimately  comes  down  to  defining  the  most  critical  thing  that  new  technologies 
will  ultimately  allow  us  to  do.  And  the  answer  is  invariably  that  we  will  be  able  to 
“respond  faster.”  That  answer  is  certainly  correct,  but  it  can  be  very  misleading  if 
we  are  still  thinking  tactically  in  the  Newtonian,  Industrial-Age  paradigm. 

// 

■  Idea  of  fast  transients  suggests  that,  in  order  to  win,  we  should  operate 
at  a  faster  tempo  or  rhythm  than  our  adversaries — or,  better  yet,  get 
inside  the  adversary’s  Observation-Orientation-Decision-Action  time 
cycle  or  loop. 

■  Why?  Such  activity  will  make  us  appear  ambiguous  (unpredictable) 
thereby  generate  confusion  and  disorder  among  our  adversaries — 
since  our  adversaries  will  be  unable  to  generate  mental  images  or  pic¬ 
tures  that  agree  with  the  menacing  as  well  as  faster  transient  rhythm  or 
patterns  they  are  competing  against.52 

// 


51  Annette  J.  Krygiel,  Behind  the  Wizard's  Curtain:  An  Integration  Environment  for  a  System  of 
Systems  (Washington  D.C.,  National  Defense  University,  1999),  1. 
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When  Col  Boyd  formulated  the  Decision  Cycle  concept  for  military  opera¬ 
tional  planning,  he  was  defining  how  to  integrate  thinking  and  acting  for  optimal 
unit  performance.  One  of  the  major  implications  of  his  model  is  the  notion  of 
thinking  “inside  the  adversary’s  Decision  Cycle,”  that  is,  if  you  can  complete 
your  Decision  Cycle  faster  than  your  opponent  can  complete  his,  you  will  have 
the  advantage. 

Inherent  in  this  concept  are  two  points:  (1)  the  better  one  can  observe,  orient, 
and  make  a  plan,  the  more  effective  his  cycle  will  become,  and  (2)  the  faster  one 
can  execute  that  plan,  the  more  efficient  his  cycle  will  become.  However,  as  indi¬ 
cated  before,  the  most  effective  organization  for  intelligence  (observing  and  ori¬ 
enting)  is  a  network  that  provides  informed  inaction  whereas  the  most  efficient 
organization  for  operations  (deciding  and  acting)  is  a  hierarchy  that  provides 
uninformed  action. 

Therefore,  every  organization  has  to  negotiate  a  tradeoff.  Do  I  want  to  be  very 
smart  and  very  slow  or  do  I  want  to  be  very  powerful,  very  fast,  and  very  stupid? 
If  I  take  the  time  to  understand  all  the  intelligence  and  come  up  with  the  best  pos¬ 
sible  plan  I  will  never  accomplish  anything,  but  if  I  build  only  a  single  plan  that  I 
can  execute  seamlessly  and  rapidly  I  may  accomplish  the  wrong  thing. 

The  Cold  War  could  be  approximated  by  a  two-player-zero-sum  game  where 
linear  Newtonian,  Industrial-Age  thinking  would  suffice.  As  we  have  seen,  the 
result  was  a  single  integrated  “strategic”  plan  that  could  be  instantly  put  into 
motion.. .and  organizational  thinking  channeled  to  the  “very  powerful  and  very 
fast”  option. 

But  in  a  Post-Cold  War  multi-player  non-zero-sum-game,  Newtonian  thinking 
is  obsolete.  “Very  powerful  and  very  fast”  also  is  likely  to  be  very  stupid.  In  the 
Information  Age,  one  wins  principally  by  being  smarter  than  the  adversary.  BUT 
how  can  one  be  smart  and  still  be  fast?  After  all,  the  object  is  still  to  be  able  to 
“think  inside”  the  adversary’s  Decision  Cycle. 

Fast  is  a  relative  thing.  If  one  is  thinking  tactically,  fast  is  a  matter  of  sensing 
the  coming  attack  and  responding  faster  than  the  adversary.  If  one  is  thinking 
strategically,  fast  is  a  matter  of  sensing  the  world,  the  adversary,  and  oneself  and 
coming  up  with  a  new  plan  for  a  new  infrastructure  that  is  more  effective  than  the 
opponent’s,  then  building  and  employing  that  new  infrastructure  faster  than  the 
adversary  can  counter. 

Strategic  thinking  and  strategic  planning  go  out  to  the  next  Decision  Cycle.  The 
most  effective  organization  is  one  that  can  execute  the  current  plan  as  rapidly  and 
efficiently  as  possible  while  simultaneously  rebuilding  itself  for  a  new  plan. 
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Building  any  new  infrastructure  is  by  nature  very  slow.  For  example,  building 
any  WMD  from  scratch  takes  years.  On  a  strategic  time  scale,  “fast”  is  like 
watching  a  glacier  move.  Therefore,  a  strategic  plan  must  be  “smart.”  If  our  next 
generation  organization  and  tools  are  smarter  and  more  effective  than  the  adver¬ 
sary’s,  they  will  prevail. 

In  tactical  thinking,  faster  is  better.  In  strategic  thinking,  smarter  is 
better. 

Therefore,  to  provide  strategic  warning  for  strategic  thinking  we  need  to 
rebuild  ourselves  for  a  strategic  war  on  terrorism  and  WMD  proliferation — even 
as  we  fight  a  tactical  war  against  terrorist  acts  and  WMD  proliferation.  To  do  this 
we  must  both  build  new  tools  to  be  able  to  think  more  effectively  and  reorient  our 
organizational  thinking  to  provide  for  strategic  warning  and  planning. 

Hypothesis  Testing  as  an  OODA  Cycle — Thinking  about 
How  We  Think 

It  is  readily  apparent  that  a  determination  of  the  order-of-battle  (OB  ) 
of  foreign  forces  is  of  decisive  importance  for  warning  intelligence. 
Indeed,  insofar  as  warning  rests  on  a  determination  of  the  facts — as 
opposed  to  the  more  complex  problem  of  determining  what  the  facts 
mean  and  issuing  some  inteipretive  judgment — the  order-of-battle 
facts  will  often  be  the  single  most  important  element  in  warning.53 

Determining  the  order-of-battle  of  foreign  forces  is  a  part  of  thinking  strategi¬ 
cally.  By  determining  what  forces  an  adversary  is  building,  one  can  project  what 
kind  of  force  structure  he  is  planning.  Plans  define  logistics,  but  logistics  also 
reflect  the  plans.  Multidimensional  Analysis  (MDA)  provides  a  systematic  way  to 
define  an  adversary’s  WMD  order-of-battle.  What  WMD  does  he  have?  What 
WMD  is  he  trying  to  build?  From  that  knowledge  one  can  project  what  WMD  he 
is  planning  to  build.  The  major  difference  from  a  standard  OB  is  that  a  WMD  OB 
includes  dual-use  industries,  organizations,  leaders,  scientists,  and  engineers. 

The  best  judgments  do  not  necessarily  result  from  bringing  more 
people  into  the  assessment  process,  and  particularly  those  who  are 
familiar  with  all  the  available  information.  The  most  accurate  warn¬ 
ing  judgments  often  are  made  by  a  minority  of  individuals.  The  com¬ 
ing  of  most  conflicts  is  much  longer  term  than  most  people  believe, 
and  the  first  indications  of  the  approaching  crisis  are  often  received 
(if  not  discerned)  months  before  the  conflict  erupts.  As  a  research 
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problem,  warning  involves  an  in-depth,  cumulative  compiling  and 
analysis  of  these  trends  and  developments  rather  than  an  excessive 
concentration  on  the  latest  or  most  current  information,  which  can  be 
highly  misleading.54 

MDA  follows  directly  from  Cynthia  Grabo’s  assessment  on  warning  intelli¬ 
gence.  History  matters.  Knowing  the  history  of  what  weapons  of  mass  destruc¬ 
tion  are  being  researched,  developed,  and  built  provides  the  baseline  for  strategic 
analysis  and  is  the  basis  for  strategic  warning.  But  unless  we  can  model  our  own 
thought  processes  in  building  Multidimensional  Analysis  (MDA)  or  strategic 
warning,  we  cannot  hope  to  write  a  computer  algorithm  to  automate  the  process. 
How  do  we  do  that?  Again,  Grabo  provides  the  critical  clue. 

As  a  research  problem ,  warning  involves  an  in-depth,  cumulative 
compiling  and  analysis  of  these  trends  and  developments...55 

MDA  or  strategic  warning  is  a  research  problem.  First  and  foremost,  every 
intelligence  analyst  is  a  researcher. 

As  indicated  before,  the  problem  of  Iraq’s  WMD  is  not  different  from  my 
eighth-grade  daughter’s  inventions  project,  or  any  research  for  that  matter.  And 
the  core  of  all  critical  research  is  hypothesis  testing.  Of  course,  hypothesis  testing 
is  done  in  response  to  asking  a  question.  Who?  What?  When?  Where?  Why? 
How?  Subsequently,  research  is  built  on  its  own  Decision  Cycle: 

■  Hypothesis  —  Build  a  possible  mechanism  for  how  the  world  works 
and  define  an  experiment  to  test  the  hypothesis. 

■  Experiment  —  Perform  a  series  of  interactions  with  the  world  and 
collect  data. 

■  Observation  —  Observe  the  data. 

■  Hypothesis  —  Correlate  the  data  with  that  predicted  by  the  hypothe¬ 
sis;  keep  hypotheses  that  are  supported  by  the  data,  and  discard 
hypotheses  that  are  inconsistent  with  the  data. 

■  Repeat  above. 

■  Theory  —  After  enough  experiments  are  performed  to  give  a  high 
degree  of  credence  to  a  given  hypothesis,  it  moves  up  to  being  a 
“theory.” 


54  Grabo,  162. 
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The  only  difference  between  the  scientific  method,  the  researcher’s  Decision 
Cycle,  and  the  OODA  Cycle  is  the  ordering  of  events. 

Research 

[Hypothesis  Define  Experiment  Experiment  Observation  Hypothesis] 

or  Theory 

Military 

[Orientation  Decision  Action]  [Observation  Orientation] 

For  the  military  officer,  the  most  important  step  is  the  action  taken  against  the 
adversary  and,  therefore,  the  OODA  cycle  culminates  in  that  action.  For  the 
researcher,  the  most  important  step  is  the  Theory,  and,  therefore,  the  Hypothesis 
Testing  cycle  culminates  with  a  better  hypothesis  and  ultimately  a  theory. 

For  the  military  officer,  taking  the  action  is  paramount.  For  the  researcher, 
building  a  plan  for  future  action  is  paramount. 

For  the  military  officer,  actions  are  collection-driven.  For  the  researcher, 
actions  are  hypothesis-driven. 

The  crucial  step  in  answering  the  original  question  is  the  orientation  step 
where  the  hypothesis  is  compared  against  observed  data.  The  researcher’s  major 
task  is  to  build  a  hypothesis  that  answers  the  question  in  a  way  that  is  consistent 
with  all  the  data.  For  the  military  officer,  this  is  not  an  issue  because  the  decision¬ 
maker  has  already  determined  which  hypothesis  answers  the  question  and  which 
plan  can  implement  that  hypothesis;  current  intelligence  is  comparing  new  data 
with  the  plan  to  ensure  that  it  is  still  on  course  and/or  any  contingencies  in  the 
plan  are  addressed. 

The  current  intelligence  analyst’s  Decision  Cycle  is  a  classical  OODA  cycle 
because  actionable  assessments  for  implementing  current  plan  are  the  goal. 
Therefore,  current  intelligence  is  collection-driven. 
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■  Observe  the  incoming  reporting. 

■  Orient  the  reporting  to  the  current  plan  and  assess  its  implications  for 
action  according  to  that  plan. 

■  Decide  what  is  most  important  to  report  for  current  action. 

■  Act  by  reporting  an  assessment  to  the  decisionmaker. 

However,  the  warning  analyst’s  Decision  Cycle  must  be  more  like  the 
researcher’s  because  the  goal  of  the  warning  analyst  is  to  providing  actionable 
assessments  for  building  a  new  plan.  Therefore,  warning  analysis  is  hypothesis- 
driven. 


■  Orient  (Hypothesize)  using  all  the  current  data  built  into  a  6-D  multi¬ 
layer  model  of  the  adversary. 

■  Decide  (Build  an  experiment)  on  what  needs  to  be  collected  to  test  the 
hypothesis. 

■  Act  (Experiment)  by  retrieving  reporting  from  available  databases  and 
libraries  or,  if  necessary,  directing  new  collection. 

■  Observe  the  collected  data. 

■  Orient  (Assess)  the  newly  examined  data  against  the  hypothesis. 

■  Orient  (Assess)  whether  the  hypothesis  is  a  theory. 

If  not  Repeat  above. 

If  so, 

■  Act  by  reporting  the  assessment  and  potential  new  plan  to  the 
policymaker. 

Strategic  analysis  and  warning  is  hypothesis-driven.  MDA  is  hypothesis- 
driven.  Therefore,  to  model  how  the  strategic  analyst  should  model  the  world — 
and  therefore  to  decide  what  kinds  of  tools  he  or  she  might  need — we  need  to 
investigate  the  steps  in  hypothesis  testing. 

Good  strategic  analysis  ultimately  addresses  the  fundamental  questions  that 
began  the  research.  Who  is  building  a  WMD  program?  What  weapons  is  he 
building?  Where  is  he  building  them?  When  and  where  does  he  plan  to  use 
them?  How  will  they  be  employed?  Why  has  he  taken  this  particular  strategy? 
As  indicated  before,  by  linking  entities  in  space,  time,  and  organization,  MDA 
builds  charts  that  show  the  history  of  the  WMD  program  in  such  terms.  To  pro¬ 
vide  strategic  warning,  the  MDA  analyst  needs  to  chart  the  WMD  program  in  6- 
D,  then  interpret  the  results  to  address  the  customers’  questions. 

What  is  fascinating  in  this  respect  is  that  the  questions  and  their  answers  are 
virtually  always  linear  and  the  customers  want  to  hear  the  linear  answer  in  the 
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form  of  a  story.  The  warning  analyst  then  needs  to  become  a  storyteller,  picking 
out  a  particular  thread  from  the  6-D  map  to  communicate  to  the  customer.  This  is 
very  similar  to  the  role  of  the  navigator  on  board  ship.  The  navigator  plots  the 
ship  on  a  map  versus  all  the  rocks  and  shoals  and  picks  out  the  best  course  toward 
the  goal.  This  is  because  the  customer,  like  the  ship’s  Captain,  needs  to  answer 
the  same  set  of  questions  about  his  own  ship.  Who  am  I  going  to  meet?  What  is 
my  mission?  When  do  I  start?  Where  to  I  plot  my  course?  How  do  I  implement 
the  plan?  Why  is  that  important? 

Whether  taking  observations  and  comparing  them  with  the  current  hypothesis 
or  map  or  taking  the  hypothesis  or  map  and  deciding  the  plan,  the  orientation  pro¬ 
cess  is  not  complete  until  the  6-D  analysis  becomes  a  linear  story  that  plots  a  best 
guess  trajectory  or  vector  for  both  ourselves  and  our  adversaries  in  that  6-D 
hypothesis  or  worldview. 

From  Hypothesis  to  Theory — 

Building  a  Theory  on  Building  a  Theory 

There  are  several  steps  a  researcher  performs  in  going  from  observations  of  the 
world  or  from  collected  data  to  knowledge  of  the  world  and  the  ability  to  transmit 
that  knowledge  to  build  an  actionable  plan. 

The  core  of  scientific  research  has  always  been  hypothesis  testing.  This  contin¬ 
ues  to  be  true  in  the  Information  Age,  but  the  way  scientists  build  and  test  hypoth¬ 
eses  is  changing  markedly  with  our  ability  to  generate,  store,  and  recall  massive 
quantities  of  data. 

From  Paper- World  Research  to  Cyber- World  Research 

The  scientist  builds  a  hypothesis  and  tests  that  hypothesis  by  analyzing  current 
data  and  coming  up  with  a  theory  of  how  the  world  works  that  is  supported  by 
that  data.  He  or  she  formulates  experiments  to  test  that  hypothesis,  performs 
those  experiments,  and  then  compares  the  results  of  the  experiments  with  those 
expected  according  to  the  hypothesis.  If  the  experimental  results  are  consistent 
with  the  hypothesis,  the  hypothesis  can  then  be  refined  and  tested  further  with 
new  and  different  experiments.  This  series  of  hypothesis  testing  steps  continues 
to  refine  the  hypothesis,  and  when  enough  experimental  tests  have  been  per¬ 
formed,  and  the  data  support  the  hypothesis  sufficiently  well,  the  scientist  can 
consider  the  hypothesis  to  be  a  theory. 
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In  the  past — through  the  Industrial  Age — these  steps  were  invariably  done 
sequentially: 

Hypothesis 

Formulate  Experiment 

Perform  Experiment 

Compare  Experiment  and  Hypothesis 
Refine  Hypothesis 

In  the  Information  Age,  the  scientific  method  remains  the  same  with  a  single 
modification — the  timing  of  the  cycle.  The  enormous  rate  at  which  data  are  being 
collected  and  archived  in  databases  means  that  hypothesis  testing  can  be  done 
uncoupled  from  laboratory  experimentation  or  intelligence  collection.  Addition¬ 
ally,  previously  collected  scientific  and  intelligence  data  are  also  archived  in  a 
format  in  which  it  can  now  easily  be  accessed  and  recalled.  Therefore,  bioinfor¬ 
matics  is  based  on  a  new  twist  on  the  scientific  method.  A  scientist  can  now  for¬ 
mulate  a  hypothesis,  formulate  an  experiment  to  test  that  hypothesis,  but  before 
going  into  the  lab  ask,  “Has  anyone  already  done  that  experiment?”  He  or  she 
can  then  check  all  available  databases  and,  if  the  experiment  has  already  been 
done,  use  those  experimental  results  to  test  the  hypothesis.  An  intelligence  ana¬ 
lyst  should  be  able  to  do  the  same;  using  MDA  to  understand  intelligence  reports 
parallels  the  use  of  bioinformatics  to  understand  biological  data. 

Information- Age  biology  has  changed  the  scientific  method  slightly  by  decou¬ 
pling  hypothesis  testing  and  experimentation.  A  biologist  can  now  do  hypothesis 
testing  based  on  data  archived  in  the  many  available  databases.  Therefore,  in  the 
Information  Age,  the  experimental  and  hypothesis-testing  components  of  the  sci¬ 
entific  method  can  be  separate: 

Experimental  Cycle 

Formulate  Experimental  Protocol 

Perform  Experiment  on  one  genome/  organism 
Archive  data  in  database 

Check  database  for  completeness 

Move  to  new  genome/organism 


Information  Cycle 
Hypothesis 

Formulate  Experiment 

Recall  Experimental  Results  from  Database 
Compare  Experiment  and  Hypothesis 
Refine  Hypothesis 
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Similarly,  an  intelligence  analyst  can  now  do  hypothesis  testing  based  on  data 
archived  in  the  many  available  databases.  In  the  Information  Age  the  collection 
and  hypothesis-testing  components  of  the  analytical  method  can  be  separate: 

Collection  Cycle 

Formulate  Collection  Requirements  Protocol 
Collect  intelligence  on  a  given  target 
Archive  data  in  database 

Check  database  for  completeness 
Move  to  new  target 


Information  Cycle 

Hypothesis 

Formulate  Evidence  Needed  to  Test  Hypothesis 
Recall  Reports  from  Database 

Compare  Reports  and  Hypothesis 
Refine  Hypothesis 

It  is  only  when  there  is  no  experimental  result  or  intelligence  report  avail¬ 
able  in  any  database  that  the  Information-age  biologist  or  analyst  needs  to 
actually  go  into  the  lab  to  perform  an  experiment  or  go  into  the  field  to  collect 
new  intelligence. 

Bioinformatics,  Multidimensional  Analysis  and  Hypothesis  Testing 

for  the  Information  Age 

In  any  kind  of  research  project  there  is  a  series  of  steps  the  researcher  takes 
from  the  formulation  of  a  research  problem  to  the  publication  of  a  theory  with 
supporting  experimental  results.  An  intelligence  analyst  performs  the  identical 
series  of  steps  from  the  identification  of  an  intelligence  question  to  the  publica¬ 
tion  of  an  assessment  with  supporting  intelligence  reports.  And  both  the  biolo¬ 
gists  and  analysts  are  splitting  their  hypothesis  testing  the  way  historians  have 
done  for  decades. 

Historians  perform  two  kinds  of  research:  (1)  collection  and  documentation 
of  historical  artifacts  and  records,  and  (2)  analysis  based  on  the  collected  docu¬ 
mentation.  For  example,  a  historian  studying  the  American  Civil  War  could 
choose  to  go  to  a  historic  battlefield  site  and  dig  for  new  artifacts  or  search  for 
new  evidence  in  the  personal  effects  saved  by  descendants  of  historical  figures. 
Sometimes,  if  the  era  being  investigated  is  recent  such  as  World  War  II,  the  his¬ 
torian  could  interview  participants  themselves.  This  type  of  historical  research  is 
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FROM  HYPOTHESIS  TO  ASSESSMENT 

Using  Industrial-age  tools  and  the  printed  word 
Using  Information-age  tools  and  the  electronic  word 


KNOWLEDGE 


Assessment 


START  HERE 

RESEARCH 

QUESTION? 


\ 

l 

I 

I 


1 


ASSESSMENT 

EXPOSITION 

Manuscript 

Webpage 


Theory 


l 


ASSESSMENT 

OUTLINE 

Sorted  3x5  Card 
Deck 
Hypertext 
Document 


Refined 

Hypothesis 


EVIDENCE  FILE 

Unsorted  3x5  Card 
Deck 
Relatbnal 
Database 


ASSESSMENT 

FORMALIZATION 

Present  argument  to 
support  assessment. 


EVIDENCE  MARSHALLING 

Sort  evidence  to  support, 
discredit,  or  modify 


Rough 

Hypothesis 


DATA 

COLLECTION 

Book/Record  Pile 
Relevant  Record 
Set 


EVIDENCE  EXTRACTION 

Extract  relevant  facts 
and  relationships. 


DATA 

REPOSITORY 

Library 
Data  Base 


DATA  RETRIEVAL 

Retrieve 
relevant  books, 
articles,  or 
records 


DATA 


A  Scientist  builds  a  THEORY. 

An  warning  analyst  builds  an  ASSESSMENT 


in  many  ways  similar  to  the  biologists’  experimental  method  of  hypothesis  test¬ 
ing  or  to  the  classical  intelligence  collection  cycle.  However,  some  historians 
never  collect  artifacts  themselves  but  rather  use  libraries  to  dig  through  docu¬ 
mentation  and  records  to  develop  new  insights  into  historical  events.  Sometimes 
the  records  are  primary  evidence,  such  as  court  records  or  archives  of  govern¬ 
ment  agencies,  but  often  the  records  are  books  published  by  other  authors. 


With  the  advent  of  automated  data  collection,  biological  researchers  and  the 
Intelligence  Community  are  both  amassing  archives  in  databases  similar  to  his¬ 
torical  archives  stored  in  libraries.  Therefore,  the  methodologies  of  bioinformat¬ 
ics  and  intelligence  analysis  will  ultimately  have  more  in  common  with  a 
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historian’s  library  research  than  the  traditional  experimental  or  collection 
approach. 

At  some  time  in  school,  we  learned  to  do  historical  library  research.  The 
methodology  used  in  that  kind  of  research  can  serve  as  a  model  for  the  kind  of 
thinking  and  methods  that  can  prove  fruitful  in  both  bioinformatics  and  intelli¬ 
gence  analysis.  We  only  need  to  update  the  approach  from  using  libraries, 
printed  documents,  and  3”x5”  index  cards  to  using  databases,  electronic 
records,  and  data  manipulation  tools.  The  strategies  and  hypothesis  testing 
methods  we  learned  in  library  research  are  very  applicable  to  bioinformatics  and 
Information- Age  intelligence. 

hypothesis,  n. ...  2.  A  proposition  or  principle  put  forth  or  stated 
(without  any  reference  to  its  correspondence  with  fact)  merely  as  a 
basis  for  reasoning  or  argument,  or  as  a  premise  from  which  to  draw 
a  conclusion;  a  supposition. 

The  Oxford  English  Dictionary 

Data  Retrieval.  When  a  research  question  is  asked  or  a  research  problem  is 
addressed,  the  first  step  is  to  form  a  preliminary  hypothesis  that  can  provide  an 
answer  to  that  question.  Then,  using  that  preliminary  hypothesis,  the  researcher 
goes  to  the  data  repository  to  retrieve  records  relevant  to  the  question  at  hand  to 
build  a  data  collection. 

The  purpose  of  this  step  is  to  collect  records  relevant  to  the  hypothesis  or  prob¬ 
lem.  The  researcher  now  has  a  data  collection — or  “shoebox” — that  contains 
records  for  further  evaluation,  some  directly  and  some  which  may  not  be  looked 
at  until  this  step  is  repeated  for  a  new  or  modified  hypothesis  after  testing  the 
original  one. 

■  Industrial-Age  Methodology.  The  researcher  went  to  the  library  and, 
by  using  catalogs  and  indices,  retrieved  books  and  documents  relevant 
to  the  problem.  These  were  taken  home  or  set  aside  for  future  use. 

■  Information-Age  Methodology.  The  researcher  logs  onto  the  Internet, 
online  library,  or  database  and  using  Boolean  search  tools  identifies 
and  retrieves  records  relevant  to  the  problem.  These  are  then  down¬ 
loaded  and  set  aside  for  future  use. 

The  value-added  in  building  the  data  collection  is  that  the  researcher  has  a 
local  dataset  that  contains  records  relevant  to  the  question  or  problem.  As  he  or 
she  extracts  evidence  and  builds  cases  for  various  hypotheses,  this  dataset — a 
“shoebox”  full  of  valuable  “stuff’ — is  a  very  important  resource  to  use  to  find 
new  evidence  as  hypotheses  are  discarded,  modified,  or  built. 
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evidence,  n.  ...  5.  Grounds  for  belief;  testimony  or  facts  tending  to 
prove  or  disprove  any  conclusion. 

The  Oxford  English  Dictionary 

Evidence  Extraction.  When  a  sufficient  data  collection  is  amassed,  the 
researcher  reads  the  relevant  records  and  extracts  bits  of  evidence56  pertinent  to 
the  problem  at  hand.  At  this  point,  if  it  becomes  clear  that  the  first  pass  on  data 
retrieval  did  not  collect  all  the  necessary  relevant  records,  the  researcher  can  use 
new  keywords  obtained  to  do  another  round  of  data  retrieval.  The  extracted  evi¬ 
dence  then  is  stored  in  an  evidence  file. 

The  puipose  of  this  step  is  to  find  all  the  bits  of  data — often  called  “factoids” 
or  “nuggets” — that  can  serve  as  evidence  to  test,  support,  discredit,  or  modify  the 
hypothesis  at  hand.  The  hypotheses  can  be  very  general,  “All  North  Korean 
microbiologists  are  potentially  involved  in  a  BW  program,”  or  very  specific,  “Dr. 
Kim  Chong-Ho  is  producing  anthrax  starter  cultures  for  weaponization.”  It  is 
important  to  remember  that  evidence  is  a  collection  of  “testimony  or  facts”  that 
support  or  discredit  a  hypothesis.  Therefore,  evidence  extraction  is  highly  depen¬ 
dent  on  the  hypothesis  at  hand  and  will  produce  a  differing  result  when  done  with 
respect  to  a  new  or  modified  hypothesis. 

■  Industrial-Age  Methodology.  The  researcher  read  the  relevant  books 
and  documents  in  the  “shoebox”  and  looked  for  individual  facts  and 
ideas  that  could  be  used  as  evidence  to  support,  reject,  or  modify  the 
hypothesis.  These  were  copied  on  3x5  cards — one  to  a  card  along 
with  referencing  information.  The  cards  were  then  set  aside  for 
future  analysis. 

■  Information-Age  Methodology.  The  researcher  reads  the  relevant 
records  in  the  electronic  “shoebox”  and  does  a  “cut  and  paste”  of  indi¬ 
vidual  facts  and  data  that  can  be  tied  to  the  hypothesis.  If  the  final 
dataset  is  expected  to  be  small,  these  evidence  “nuggets”  can  be  cop¬ 
ied  into  a  word-processing  file — along  with  referencing  information. 


56As  indicated  here,  I  define  “evidence”  as  data  that  is  pertinent  to  the  problem  at  hand.  As  such, 
“evidence”  is  always  linked  with  a  hypothesis.  For  example,  for  GEN  Eisenhower  on  5  June  1944, 
the  barometric  pressure  in  England  or  California  was  just  data,  but  the  barometric  pressure  in  Ice¬ 
land  was  evidence  to  be  weighed  in  support  of  the  hypothesis  that  a  low  barometric  reading  in  Ice¬ 
land  on  5  June  argues  bad  weather  in  the  English  Channel  on  6  June.  And  of  course,  the  barometric 
pressure/bad  weather  hypothesis  was  only  valid  for  GEN  Eisenhower  in  addressing  the  question, 
“Do  I  invade  tomorrow  or  not?”  The  implication  here  is  that  not  all  data  in  a  data  repository  is  “evi¬ 
dence.”  It  only  becomes  “evidence”  after  it  is  collected  and  judged  relevant  then  sorted  and  judged 
pertinent  to  the  hypothesis  at  hand. 
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If  the  final  dataset  is  expected  to  be  large,  the  researcher  will  set  up  a 
relational  database  and  store  the  evidence  “nuggets”  as  individual 
entries  in  the  relational  database. 

The  value-added  in  building  the  evidence  file  or  unsorted  3x5  card  deck  is  that 
evidence  “nuggets”  relevant  to  the  hypotheses  at  hand  are  available  to  evaluate 
those  hypotheses  directly  and  also  any  future  modified  or  new  hypotheses.  For 
example,  a  report  that  “Dr.  Kim  Chong-Ho  is  an  expert  on  botulinum  toxin”  may 
be  used  to  discredit  the  hypothesis  that  he  is  producing  anthrax  cultures,  to  sup¬ 
port  the  hypothesis  that  he  is  overseeing  a  botulinum  toxin  BW  program,  or 
merely  to  back  up  a  hypothesis  that  he  is  a  well-versed  microbiologist.  However, 
keeping  this  “nugget”  in  the  evidence  file  allows  the  researcher  to  go  back  to  test 
these  or  new  hypotheses  without  having  to  start  from  the  data  collection  step 
every  time.  In  MDA,  evidence  can  link  entities  in  6-D  and  at  multiple  hierarchical 
levels;  evidence  that  may  lead  to  a  dead  end  for  one  hypothesis  may  be  very  use¬ 
ful  to  test  another. 

theory,  n. ...  4.a.  A  scheme  or  system  of  ideas  or  statements  held  as 
an  explanation  or  account  of  a  group  of  facts  or  phenomena;  a 
hypothesis  that  has  been  confirmed  or  established  by  observation 
or  experimen  t,  and  is  propounded  or  accepted  accounting  for  the 
known  facts;  a  statement  of  what  are  held  to  be  general  laws,  prin¬ 
ciples,  or  causes  of  something  known  or  observed. 

The  Oxford  English  Dictionary 

Evidence  Marshalling.  When  enough  evidence  has  been  extracted  and  stored 
in  an  evidence  file,  the  researcher  builds  a  case  to  argue  for  a  hypothesis  using  the 
individual  pieces  of  evidence  in  the  file. 

If  not  enough  evidence  is  in  the  file  on  a  particular  topic,  the  researcher  can 
use  new  keywords  or  Boolean  combinations  of  keywords  to  perform  another 
round  of  data  retrieval  and  evidence  extraction  to  build  the  evidence  file.  An 
important  point  to  remember  here  is  that  the  evidence  file  is  unsorted  data  while 
the  evidence  marshalling  procedure  sorts  and  re-orders  that  evidence  to  build  a 
coherent  logical  story  in  support  of  a  hypothesis.  At  this  point  the  theory  or 
assessment  exposition  will  have  ideas,  facts,  experimental  data,  or  intelligence 
reports  to  support  it. 

Further,  for  the  sake  of  expediency  and  based  on  academic  principle,  the  pre¬ 
ferred  method  of  performing  analysis  is  grounded  in  the  principles  espoused  by 
the  curriculum  of  the  Joint  Military  Intellligence  College  and  encompassing  the 
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suggested  guidance  and  models  of  MacEachin,  Heuer,  Toulmin,  Schum,  and 
Hughes.57 

These  models  of  critical  thinking  move  beyond  the  simplistic  and 
intuitive,  representing  higher-order  cognitive  function  and  the  ability 
to  replicate  and  illustrate  the  analytical  process.  They  include  Analy¬ 
sis  of  Competing  Hypotheses  (ACH)  methods,  the  use  of  evidence 
and  inference,  argumentation,  and  other  techniques  employing 
“imaginative  and  critical  reasoning.”58 

The  second  O,  orientation — as  the  repository  of  our  genetic  heritage, 
cultural  tradition,  and  previous  experiences — is  the  most  important 
part  of  the  O-O-D-A  loop  since  it  shapes  the  way  we  observe,  the 
way,  we  decide,  the  way  we  act.59 

Col  Boyd 

Orientation  is  built  on  hypothesis  testing.  How  we  can  integrate  our  “genetic 
heritage,  cultural  tradition,  and  previous  experience”  into  models  that  systematize 
that  worldview  for  Decisionmaking  is  the  key  challenge  for  the  IC  of  the  21st 
Century.  Therefore,  research  into  analyzing  how  we  analyze  is  critical  for  com¬ 
puter-assisted  implementation  of  strategic  analysis.  We  cannot  program  a  com¬ 
puter  to  help  us  think  until  we  know  how  we  think — in  detail.  The  first  step 
toward  that  goal  is  the  understanding  that  analysis  is  research,  that  hypothesis 
testing  is  the  OODA  Cycle,  and  that  going  into  the  Information  Age,  it  is  the  Ori¬ 
entation  step  of  the  national  OODA  Cycle  that  is  broken. 

Theory  Formulation.  When  the  hypothesis  has  been  examined  and  evidence 
marshaled  to  test  the  hypothesis,  the  researcher  can  now  propose  a  new  theory — 
based  on  facts  and  experimental  evidence  or  intelligence  reporting. 

The  puipose  of  this  step  is  to  provide  a  “published”  version  of  the  theory  as  a 
story  that  presents  a  hypothesis  and  the  evidence  that  supports  (or  questions)  it. 
At  this  point,  dependent  on  the  completeness  of  the  evidence  supporting  the  the- 


57  These  refer  to  proponents  of  new  methodologies  analytical  reasoning  through  study  of  the 
analytical  process:  Douglas  J.  MacEachin,  Richards  J.  Heuer,  Stephen  E.  Toulmin.  Dr.  David  A. 
Schum.  and  Francis  J.  Hughes.  I  should  note  that  the  concept  of  Bottom-Up  data-driven  modeling 
versus  Top-Down  hypothesis-driven  modeling  is  virtually  identical  to  Heuer’s  distinction  between 
data-driven  analysis  and  concept-driven  analysis.  A  reading  list  of  their  works  can  be  found  in  Rue 
(ref  below). 

58  GYSGT  Steven  S.  Rue,  USMC,  The  Breakdown  of  the  PC  Paradigm:  Information  Display 
Technology  as  Analysis  Inhibitor ,  MSSI  Thesis  (Washington,  D.C:  Joint  Military  Intelligence 
College,  August  2003),  12. 

59  Col  Boyd. 
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ory,  the  researcher  could  dip  back  into  the  evidence  file  or  go  all  the  way  back  to 
the  data  repository  for  additional  evidence  to  build  the  case.  If  the  evidence  was 
incomplete  at  that  point,  the  researcher  would  be  required  to  propose  and  perform 
new  experiments  or  collect  additional  intelligence  for  further  test  of  the  theory.  If 
a  new  evidence  “nugget”  is  found  that  apparently  discredits  the  current  hypothe¬ 
sis  or  theory,  the  scientist  or  analyst  can  return  to  the  evidence  file  with  a  modi¬ 
fied  or  totally  new  hypothesis  which  can  then  be  rapidly  tested  against  the 
evidence  already  available,  albeit  in  an  unsorted  fashion  with  respect  to  the  new 
hypothesis.  The  ability  of  being  able  to  re-sort  evidence  file  or  “3x5  cards”  to  test 
or  re-test  a  hypothesis  more  than  overweighs  the  time  and  energy  expended  in 
building  and  maintaining  the  evidence  file.60 

The  value-added  in  theory  formulation  is  that  the  researcher  has  taken  a  sys¬ 
tematic  methodology  to  collect  data  and  extract  evidence  that  directly  supports  or 
discredits  hypotheses.  A  scientist  will  usually  wait  until  enough  iterations  of  the 
Hypothesis  Testing  Cycle  have  been  completed  to  support  the  theory  at  hand 
unequivocally  before  publishing.  An  intelligence  analyst  often  will  not  have  that 
luxury,  but  a  systematic  hypothesis  testing  approach,  especially  when  multiple 
competing  hypotheses  are  tested  simultaneously  with  the  same  evidence  file,  can 
provide  the  analyst  the  ability  to  publish  his  or  her  assessment  at  almost  any  time, 
either  as  a  brief  or  paper.  However,  with  fewer  iterations  of  the  cycle,  the  assess¬ 
ment  may  need  to  provide  more  than  one  hypothesis  with  both  supporting  and 
discrediting  evidence  for  each. 

I  suggest  that  the  basic  methodology  of  data  retrieval  and  evidence  marshalling 
in  support  of  hypothesis  testing  has  not  changed  and  will  not  change  as  the  bio¬ 
logical  and  intelligence  communities  go  from  the  Industrial  Age  with  the  printed 
word  and  library  to  the  Information  Age  with  the  electronic  word  and  database — 
only  that  the  methodology  will  get  much  more  powerful  as  more  data  become 
available  along  with  tools  to  identify,  retrieve,  and  order  evidence. 


60  The  concept  of  the  "evidence  file”  or  “electronic  3x5  card  deck”  can  be  directly  linked  to  ana¬ 
lytical  methodologies  such  as  Analysis  of  Competing  Hypotheses  (ACH)  or  other  methods  of  using 
evidence  and  inference.  The  "evidence  file”  is  the  analyst’s  unsorted  "3x5  card  deck”  of  data  that  he 
or  she  has  collected  because  it  appears  to  be  pertinent  to  the  question  at  hand.  Accordingly,  if  using 
ACH  as  an  analytical  tool,  the  analyst  can  sort  the  "3x5  cards”  once  for  each  of  the  competing 
hypotheses  to  support,  discredit,  or  modify  each  in  turn  for  further  comparison.  The  power  in  MDA 
in  this  process  is  that  a  massive  amount  of  evidence  is  compiled  on  the  basis  of  very  generic  models 
such  as  the  basic  WMD  timeline  and  organization  chart  which  then  can  be  used  directly  as  an  evi¬ 
dence  file  for  systematic  hypothesis  testing  tools  such  as  ACH. 
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Using  Homology  Searching  in  Intelligence  Analysis 


In  the  biological  sciences  another  kind  of  powerful  tool  for  evidence  evalua¬ 
tion  is  called  homology  comparison  or  homology  searching.  It  has  the  potential 
for  use  in  Information-Age  strategic  analysis.  Homology  searching  is  based  on 
the  theory  that  organisms  grow  and  develop  through  gene  networks  that  pro¬ 
gram  all  the  biochemical  steps  in  that  process  and  that  the  genes  in  the  program 
are  inherited  directly  or  with  slight  changes  (or  mutations)  from  their  ancestors 
and  parents.  MDA  of  several  WMD  programs  suggests  that  WMD  programs 
grow  and  develop  on  the  basis  of  organizational  networks  that  define  all  the 
scientific,  technical,  and  leadership  steps  in  that  process  and  that  the  people  in 
the  program  acquire  the  knowledge  and  skills  directly  from  their  scientific  or 
leadership  mentors. 

Gene  networks  program  development  of  biological  organisms.  People  net¬ 
works  develop  WMD  programs. 

Gene  traits  are  inherited  from  ancestors  and  parents.  Scientific,  technical,  and 
leadership  traits  are  learned  from  mentors. 

Once  again,  history  matters. 

Following  gene  pedigrees  can  help  geneticists  and  molecular  biologists  to 
understand  organismal  development  and  disease.  Following  mentorship  pedi¬ 
grees  can  help  warning  analysts  to  understand  organizational  development  and 
WMD  programs. 

MDA  builds  a  top-down  graphical  hypothesis  of  the  steps  and  organizations 
required  for  a  WMD  program.  When  MDA  has  been  done  on  several  WMD  pro¬ 
grams,  comparison  among  the  related  WMD  models  can  provide  important  clues 
for  further  analysis  and  collection  in  the  same  way  that  homology  searching  in 
genetics  and  molecular  biology  is  becoming  a  very  powerful  bioinformatics  tool 
in  the  study  of  organismal  development  and  disease.  Biologists  use  “model” 
organisms,  such  as  yeast,  fruit  flies,  mice,  and  worms,  to  study  human  develop¬ 
ment  and  disease  because  the  gene  networks  in  all  those  organisms  are  related  not 
only  in  function  but  also  in  pedigree — common  genes  from  common  ancestors. 
Such  a  methodology  can  also  be  very  powerful  in  studying  WMD  development 
because  the  people  networks  in  WMD  programs  worldwide  are  related  not  only 
in  function  but  often  in  pedigree — common  technologies  from  common  prolifera- 
tors  and  mentors. 

Identification  of  homology  between  genes  can  be  used  as  evidence  or  as  a 
guide  for  further  experimentation.  The  search  for  homology  between  WMD  per- 


138 


sonnel  can  also  be  fruitful  when  several  programs  can  be  compared  using  MDA. 
This  is  done  in  four  major  ways. 

■  Comparison  of  disease  genes  with  normal  genes  in  the  same  organism. 
By  comparing  the  gene  sequences  and  structures  of  a  mutated  gene  in 
a  disease  patient  and  the  same  gene  in  a  normal  person,  molecular 
biologists  can  deduce  the  molecular  differences  in  the  DNA  and  pro¬ 
teins  that  cause  the  malfunction  in  the  disease.  Example:  sickle  cell 
human  beta-hemoglobin  vs.  normal  human  beta-hemoglobin.  Simi¬ 
larly,  by  comparing  the  resumes  of  WMD-associated  leaders,  scien¬ 
tists,  and  engineers  with  those  of  “normal”  personnel  working  in 
legitimate  dual-use  programs  in  the  same  country,  warning  analysts 
can  begin  to  build  profiles  and  indicators  for  the  differences  expected 
in  going  from  legitimate  dual-use  programs  to  WMD  programs. 

■  Comparison  of  related  genes  in  the  same  organism.  Often  there  are 
gene  families  in  an  organism  that  encode  homologous  but  not  identical 
protein  sequences.  Example:  human  alpha-hemoglobin  and  beta- 
hemoglobin  expressed  in  adults  vs.  delta-hemoglobin  and  epsilon- 
hemoglobin  expressed  in  infants  and  fetuses.  The  homology  is  evi¬ 
dence  that  those  proteins  have  similar  functions,  but  biologists  can 
then  deduce  fine  differences  in  the  differing  genes  that  function  in  dif¬ 
ferent  places  in  the  body  or  at  different  times  in  development.  Poten¬ 
tially,  comparison  of  WMD  personnel  resumes  and  organizational 
histories  with  resumes  and  histories  in  legitimate  dual-use  programs 
can  point  to  places  or  times  where  the  two  diverge. 

■  Comparison  of  the  same  gene  in  related  organisms.  Highly  homolo¬ 
gous  proteins  in  different  organisms  often  have  the  same  function. 
Example:  human  beta-globin  vs.  mouse  beta-globin.  Comparison  of 
WMD  personnel  resumes  and  organizational  histories  in  one  state  with 
those  in  other  WMD-developing  countries  to  indicate  emergent  WMD 
programs.  This  can  be  even  more  powerful  in  cases  where  the  person¬ 
nel  of  one  nation  have  been  actively  proliferating  WMD  to  the  second 
nation,  because  knowledge  of  the  first  nation’s  WMD  program  will 
provide  very  specific  I&W  on  the  second  nation’s  WMD  program. 

■  Comparison  of  related  genes  in  related  organisms.  Homologous  pro¬ 
teins  in  different  organisms  often  have  similar  functions.  Example: 
human  beta-globin  vs.  plant  leghemoglobin.  Analysts  can  begin  to 
build  a  common  profile  for  all  the  personalities  and  organizations 
required  for  WMD  development  by  comparing  the  timelines  and  orga¬ 
nizational  charts  built  by  MDA  for  many  different  WMD  programs. 
Critical  skills  sets,  organizational  relationships,  and  proliferation  path- 
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ways  can  be  identified  in  this  way  so  that  every  new  MDA  of  a  differ¬ 
ent  WMD  or  CBRNE  program  will  become  easier  as  a  common  WMD 
MDA  model  is  built  for  each  type  of  WMD  and  a  range  of  different 
strategies  within  that  model  emerges  by  analysis  of  multiple  programs. 

Biologists  now  exploit  the  power  of  homology  searching  by  using  a  few  sim¬ 
ple  bioinformatics  tools  to  deduce  the  function  and  mechanisms  of  newly  discov¬ 
ered  genes  by  comparison  with  evidence  in  DNA.  protein,  genetic,  and  other 
databases — without  having  to  perform  any  additional  laboratory  or  field  experi¬ 
ments!  Once  MDA  has  been  used  to  profile  a  few  WMD  programs,  using  similar 
homology  searching  methods  can  recall  more  evidence  from  the  current  data¬ 
bases  without  having  to  perform  new  field  collection.  If  analysts  concentrate  on 
using  systematic  MDA-assisted  hypothesis  testing  to  build  better  theories  and 
assessments  against  a  worldwide  baseline  of  WMD  programs,  not  only  will  our 
understanding  of  individual  programs  greatly  improve,  but  an  understanding  of 
WMD  proliferation  mechanisms  will  inevitably  emerge. 

Computers  Don’t  Think,  People  Think — New  Thinking  Tools 
for  the  Information  Age 

A  system  is  defined  as  a  set  of  different  elements  so  connected  or 
related  as  to  perform  a  unique  function  not  performable  by  the  ele¬ 
ments  alone.61 

Annette  Krygiel 

Systems,  like  their  biological  counterparts,  are  defined  by  what  they  DO,  not 
what  they  ARE.  The  “database  problem”  is  not  a  problem  with  databases  at  all. 
Rather,  the  problem  is  to  build  a  new  system  of  people  and  information  technol¬ 
ogy  (IT)  systems  by  which  the  analysts  can,  in  fact,  find  Novel  Intelligence  in 
Massive  Data  and  can,  in  fact,  provide  strategic  warning.  The  new  system  will  be 
composed  of  people  and  computers  whereby  the  computers  and  the  databases 
they  contain  will  be  tools  for  the  analysts  to  use  to  become  smarter. 

The  problem  with  the  “database”  problem  is  in  first  realizing  that  there  are  at 
least  four  different  kinds  of  databases.  Each  corresponds  to  the  datasets  that 
researchers  already  use  in  hypothesis  testing  (data  repository,  data  collection,  evi¬ 
dence  file,  and  assessment  outline)  and  each  is  distinct  in  its  format  and  usage. 
And  it  is  very  important  to  keep  clear  the  distinction  between  databases  and  the 
datasets  they  contain.  Lessons  learned  from  MDA  projects  on  WMD  programs 


61  Krygiel,  32. 
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indicate  that  the  same  data  “nugget”  can  reside  in  each  dataset  contained  in  each 
database,  BUT  there  is  different  analytical  worth  and  value-added  dependent  on 
where  the  “nugget”  is  found. 

Getting  the  Proper  Tools  to  Do  the  Job: 

What  New  Computing  Tools  Do  We  Need? 

Although  the  individual  kinds  of  databases  and  database  tools  have  been 
around  for  many  years,  a  major  impediment  to  strategic  analysis  and  MDA  is  that 
current  IT  systems  are  not  set  up  for  hypothesis  testing  mainly  because  when  one 
uses  the  word  “system,”  by  current  paradigms,  one  immediately  thinks  “IT  sys¬ 
tem”  rather  than  “Human/IT  system,”  which  does  not  account  for  the  multiple 
human-computer  and  computer-human  interactions  required  to  complete  the  ana¬ 
lytical  task  of  building  a  strategic  assessment. 

What  Data  Mining  is  Not: 

■  A  particular  software  product  or  mathematical  program 

■  Just  for  statisticians 

■  Turn-key 
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□  Human  intervention  needed  to  verify  model  integrity  —  “Does  it  make 
sense?” 

□  Multiple  iterations  to  find  good  models 
■  A  silver  bullet 

□  Data  are  not  informative  in  and  of  themselves62 

We  can  illustrate  the  difficulties  in  the  current  IC  data-handling  systems  by  fol¬ 
lowing  the  steps  an  all-source  analyst  performs  in  converting  data  to  assessment 
using  the  Hypothesis  Testing  Cycle.  At  each  database  (DB)  step,  there  is  an  input 
of  data  which  then  comprise  the  particular  dataset  in  that  DB,  a  processing  step  in 
which  the  DB  tools  perform  specific  tasks  as  specified  by  the  analyst,  and  an  out¬ 
put  step  in  which  new  processed  data  is  presented  to  the  analyst.  At  each  output 
step,  the  analyst  performs  the  research  tasks  in  hypothesis  testing  as  outlined 
above  and  inputs  the  processed  data  into  the  next  DB  in  much  the  same  way  he  or 
she  formerly  used  the  library,  books,  and  3x5  card  files.  [Several  MDA  projects 
have  been  accomplished  using  MS  Word  and  PowerPoint  as  data-manipulation 
tools  because  current  IC  IT  systems  are  unsatisfactory  for  MDA,  mainly  due  to 
limitations  in  IT-human  interfaces  and  data  movement  among  database  types. 
Specific  comments  on  current  IC  limitations  are  noted  below  in  brackets.] 

Data  input  to  the  analytical  process  is  by  way  of  GLOBAL  databases  (DBs) 
which  are  the  libraries  of  the  IC:  SIGINT  from  NS  A,  HUMINT  from  CIA,  Open 
Source  from  Foreign  Broadcast  Information  Service  (FBIS),  and  summaries  of 
IMINT  data  from  NIMA.  These  data  represent  published  messages  from  the  col¬ 
lection  agencies  and  arc  loaded  in  a  standard  TEXT  format  with  a  few  meta-tags 
for  identification  (but  not  analysis). 

(1)  GLOBAL  DB  (Library)  =  TEXT  storage  of  published  records. 

Input  =  Published  records  from  Collectors  at  CIA,  NSA,  FBIS,  NIMA 
(text  not  images). 

Processing  =  Filtering  of  DBs  according  to  analyst-written  Profile. 

Output  =  Presentation  of  filtered  records  to  the  analyst. 

As  was  done  with  the  books  in  the  library,  the  analyst  then  scans  the  presented 
records  from  the  GLOBAL  DB  and  decides  whether  records  are  relevant/not  rele¬ 
vant  to  task. 

The  analyst  then  RETRIEVES  relevant  records  and  redirects  them  to  the  next 
TEXT  storage.  In  the  past,  every  analyst  had  a  “shoebox”  that  contained  all  the 


62  Abbott. 
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task-relevant  documents  in  whatever  format  they  were  retrieved:  books,  articles, 
paper  copies  of  intelligence  reports.  Hypothesis  testing  is  built  on  doing  key 
experiments  based  on  assumptions  of  the  hypothesis;  as  alternative  hypotheses 
are  tested,  discarded,  and  reconsidered,  the  researcher  needs  a  place  to  store  and 
recall  the  experimental  result — the  “lab  notebook.”  Since  the  all-source  analyst 
works  with  experiments  done  by  others,  that  is  with  data  input  by  collectors,  this 
“shoebox”  represents  the  analyst  notebook  of  relevant  documents  for  future  refer¬ 
ence.  This  “shoebox”  has  huge  value-added  in  that  the  analyst  has  looked  at  the 
document  and  assessed  that  the  material  contained  within  the  document  is  rele¬ 
vant  to  the  assessments  he  or  she  needs  to  make.  [One  of  the  major  reasons  most 
IC  analysts  are  prone  to  stay  with  their  paper  copies  or  MS  Word  electronic  shoe- 
boxes  is  that  no  current  IT  systems  have  any  reasonable  methods  for  building 
electronic  shoeboxes  from  heterogeneous  data.  This  kind  of  DB  currently  does 
not  exist  in  useable  format;  Pathfinder  on  JIVA  at  DIA  is  slated  to  serve  this  pur¬ 
pose,  but  available  options  for  data-entry  of  relevant  records  by  analysts  remain 
too  cumbersome  to  be  of  any  use.  A  major  goal  in  any  IT  system  used  for  hypoth¬ 
esis  testing  or  MDA  is  to  be  able  to  build  an  electronic  “shoebox”  rapidly  and 
easily.] 

(2)  DATA  COLLECTION/SHOEBOX  DB  =  TEXT  storage  of  task-relevant 
records. 

Input  =  (1)  First-pass  analyst  input  of  relevant  records. 

(2)  Feedback  input  through  direct  analyst  query  of  or  setup  to  data 
mining  tool. 

Processing  =  TEXT  data  mining  (such  as  Pathfinder  and  text-mining  analytical 
tools). 

Output  =  Presentation  of  filtered  or  data-mined  records  to  all-source  analysts. 

Analysts  read  the  presented  records  from  the  SHOEBOX  DB  and: 

■  Analyze:  Analyst  evaluates  data  recalled  from  SHOEBOX  DB  by 
QUERY  or  by  SHOEBOX  DB  TEXT  data  mining  tool. 

■  Reformat:  Analyst  reformats  important  records  into  METATEXT  for 
entry  into  ENTITY  DB.  These  are  used  in  build  facility,  organization, 
and  project  profiles,  and  personnel  biographies. 

The  data  prep  is  most  difficult  to  characterize.63 

(3)  ENTITY  DB  (Evidence  File)  =  METATEXT  storage  of  filtered/analyzed 
records. 


63  Abbott. 
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Input  =  (1)  Analyst  Input  of  METATEXT  records:  (a)  reformatted  from  SHOE- 
BOX  DB  by  analyst,  or  (b)  input  from  already  METATAGGED  DBs  (such  as  the 
PubMed  online  biomedical  DB). 

(2)  Analyst  feedback  to  adjust  visual  or  network  displays. 

Processing  =  (1)  METATEXT  data  mining  (with  data  mining  tools  for  tabular 
data). 

(2)  MDA  Chart  presentation  (such  as  by  Analyst  Notebook) 

Output  =  Presentation  of:  (1)  text  or  visual  displays  of  data  mining 
(2)  MDA  chart  displays  (with  hyperlinks  to  DATA 

COLLECTION  DB  for  original  report  with  highlighted  markups). 

Analysts  view  the  presented  graphs,  networks,  and  the  like  from  the  ENTITY 
DB  and: 


■  Analyze:  Analyst  evaluates  data  outputs  provided  by  (1)  METATEXT 
data  mining  tools  or  (2)  MDA  chart  presentations  or  (3)  link  analysis 
directly  from  documents  in  the  shoebox. 

■  Marshal  Evidence:  Analyst  builds  MDA  models  using  maps,  time¬ 
lines,  and  organization  charts,  and  builds  HYPERTEXT  documents 
for  input  to  PRESENTATION  DB. 

[Note  that  since  this  is  all-source  analysis  at  this  point,  collection  analysts  at 
NSA,  NIMA,  and  FBIS  should  ideally  not  be  expected  to  do  this  level  of  analy¬ 
sis;  however,  since  current  collaboration  tools  are  not  adequate,  the  collection 
analysts  must  do  this  to  be  able  to  perform  the  SIGINT,  IMINT,  or  OSINT  collec¬ 
tion  task  properly], 

[The  ENTITY  DB  will  potentially  prove  to  be  the  most  valuable  analytical  DB 
in  the  future,  but  currently  constitutes  a  huge  gap  in  the  IC’s  repertoire  of  IT 
tools.  A  shared  ENTITY  DB  would  be  the  equivalent  of  a  shared  electronic  3x5 
card  deck.  Imagine  if  a  historian  were  writing  a  new  book  on  the  Civil  War  and, 
instead  of  having  just  the  library  for  references,  could  have  access  to  an  electronic 
version  of  the  3x5  card  note  decks  of  Bruce  Catton  and  a  dozen  other  Civil  War 
historians,  complete  with  original  references  on  each.  The  value  added  would  be 
immense,  not  only  in  tracing  hypotheses  supported  by  Catton’s  books  but  also  in 
testing  hypotheses  he  may  have  had  and  discarded  (but  kept  the  cards  for  future 
reference)  and  in  testing  completely  new  hypotheses  not  covered  in  the  linear 
threads  reported  in  the  narratives  of  his  books.  However,  as  Catton’s  3x5  card 
deck  might  have  actually  been  a  pile  of  highlighted  copies  of  documents  and 
handwritten  records,  the  cost  of  transferring  these  documents  to  electronic  format 


144 


would  be  enormous.  The  IC  has  many  senior  analysts  approaching  retirement  age 
who  are  the  “Bruce  Catton’s”  of  the  IC.  Building  an  ENTITY  DB  based  on  the 
“shoeboxes”  of  all  the  retiring  IC  analysts  will  certainly  be  a  huge  expense,  but  if 
it  is  not  done,  all  the  assembled  knowledge  accumulated  by  those  analysts  in 
using  their  “shoeboxes”  as  datasets  for  hypothesis  testing  will  be  lost.  Potentially, 
it  could  take  a  “curator”  several  months  to  transcribe  the  “shoebox”  of  a  single 
retiring  analyst  into  a  new  electronic  SHOEBOX  DB  and  ENTITY  DB.  However, 
considering  that  “smart”  bombs  are  only  as  smart  as  the  analyst  providing  the  tar¬ 
geting,  if  the  shoebox  reformatting  of  a  single  analyst  cost  about  $75,000,  it  need 
only  account  for  improving  the  analysis  of  the  next  generation  analyst  well 
enough  to  turn  a  single  smart  bomb  miss  into  a  hit  to  pay  for  itself.] 

(4)  PRESENTATION  DB  =  HYPERTEXT  storage  of  analyzed  records. 

Input  =  Analyst  input  of: 

(1)  HYPERTEXT  maps,  timelines,  and  organization  charts  (which  contain  links 
to  ENTITY  DB  “3x5  cards”  and  highlighted  reports  in  DATA  COLLECTION 
DB)  and; 

(2)  associated  facility,  organization,  and  project  profiles,  and  personnel  biogra¬ 
phies. 

Processing  =  Website  setup  for  viewing  on  Intelink  (such  as  the  Athena  WMD 
site) 

Output  =  Presentation  to  policymakers  and  warfighters  either  as  briefs  or  as  Web¬ 
sites  in  the  PRESENTATION  DB. 

The  challenge  for  IC  analysis  and  for  community  resource  managers  for  the 
21st  Century  is  to  be  able  to  build  IT  tools  that  can  support  hypothesis  testing  and 
multidimensional  analysis  and  to  make  this  multidimensional,  multi-agency  pro¬ 
cess  work  in  a  collaborative  environment. 
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Chapter  11 


MODELING  OURSELVES 

How  can  we  reorient  our  intelligence  process  to  empower  analysts  to  think 
strategically?  Step  3  in  building  Warning  Analysis  for  the  Information  Age  is  to 
“reorient  the  arrows”  within  the  IC — both  the  information  flow  and  leadership 
interactions — to  provide  mechanisms  built  on  Information-Age  thinking  and 
thereby  be  as  close  to  a  network  as  possible.  The  key  to  doing  this  will  be  to 
empower  the  analyst  to  build  a  new  Orientation  based  on  the  hyperword.  64 

From  Looking  Outward  to  Looking  Inward 


// 

ILLUMINATION 

■  The  previous  discussion  assumes  interaction  with  both  the  external  and  inter¬ 
nal  environment.  Now.  let  us  assume,  for  whatever  reason  or  combination  of 
circumstances,  that  we  design  a  command  and  control  system  that  hinders 
interaction  with  the  external  environment.  This  implies  a  focus  inward,  rather 
than  outward. 

■  Picking  up  from  this  idea,  we  observe  from  Darwin  that: 

□  The  environment  selects. 

□  Ability  or  inability  to  interact  and  adapt  to  exigencies  of  environment 
select  one  in  or  out. 

■  Furthermore,  according  to  the  Godel  Proof,  the  Heisenberg  Uncertainty  Princi¬ 
ple,  and  the  Second  Law  of  Thermodynamics: 

□  One  cannot  determine  the  character  or  nature  of  a  system  within  itself. 

□  Moreover,  attempts  to  do  so  lead  to  confusion  and  disorder.  Why? 
Because  in  the  “real  world”  the  environment  intrudes  (my  view). 

■  Now,  by  applying  the  ideas  of  Darwin,  the  Second  Law,  Heisenberg,  and 
Godel  to  Clausewitz  one  can  see  that: 

He  who  can  generate  many  non-cooperative  centers  of  gravity  magni¬ 
fies  friction.  Why?  Many  non-cooperative  centers  of  gravity  within  a 
system  restrict  interaction  and  adaptability  of  system  with  its  sur¬ 
roundings,  thereby  leading  to  a  focus  inward  (i.e.,  within  itself). 


64  The  advent  of  HTML  and  the  ability  to  hyperlink  related  ideas  and  story  threads  is  beginning 
to  change  the  way  we  write.  I  will  refer  to  this  new  method  of  writing,  which  transcends  the  printed 
word,  as  the  hyperword. 
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which  in  turn  generates  confusion  and  disorder,  which  impedes  vigor¬ 
ous  or  directed  activity,  hence,  by  definition,  magnifies  friction  or 
entropy.65 

// 


Modeling  Ourselves 

Even  with  Information-Age  methods  to  model  the  adversary  and  tools  to 
implement  those  models,  we  still  cannot  truly  put  all  the  pieces  together  unless 
we  have  built  an  organization  to  integrate  those  methods  and  tools  in  a  coherent 
manner.  But  how?  Again  Col  Boyd  provides  guidance  both  in  what  he  says  and 
in  what  he  implies.  His  model  for  the  adversary  indicates  that  our  aim  should  be 
to  “generate  many  non-cooperative  centers  of  gravity”  in  the  adversary  which 
will  foster  our  ability  to  be  able  to  think  inside  his  OODA  Cycle.  Implicit  in  this 
message  is  that  we  must  be  able  to  generate  many  cooperative  centers  of  gravity 
within  our  own  organization.  Therefore,  we  need  not  only  to  look  outward  to 
build  better  ways  to  understand  the  adversary  but  also  to  look  inward  to  under¬ 
stand  ourselves  to  build  a  better  IC. 

As  organizations  evolve  from  loose  confederations  to  integrated  systems  of 
systems,  the  components  of  the  organization  redefine  their  roles — going  from 
working  in  parallel  to  working  as  an  integrated  team.  The  increasing  demands  of 
the  Information  Age  for  quality  intelligence  and  warning  analysis  requires  that 
the  Intelligence  Community  clearly  reorient  the  roles  of  its  component  agencies 
to  do  the  most  with  its  most  scarce  asset — its  analysts. 

...various  alternative  hypotheses  may  not  be  given  adequate  consider¬ 
ation,  or  even  sometimes  considered  at  all,  and  no  systematic  effort  is 
made  to  insure  that  some  group  really  goes  through  all  the  evidence 
and  considers  the  various  alternative  explanations  in  exhaustive 
detail. 

One  reason  for  this,  which  we  have  noted  before,  is  that  in  crises,  or 
budding  crisis  situations,  there  is  likely  to  be  an  overwhelming  quan¬ 
tity  of  information,  the  mere  scanning  and  preliminary  processing  of 
which  is  consuming  most  of  the  analyst’s  time.  There  are  simply 
insufficient  resources  to  cope  with  all  the  information  in  any  manner, 
let  alone  go  through  a  time-consuming  process  of  evaluating  each 
item  of  information  against  several  hypotheses.66 


65  Col  Boyd. 
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When  young  children  play  soccer,  they  usually  play  “clusterball”  where  virtu¬ 
ally  all  the  players  are  in  a  tight  group  trying  to  kick  the  ball  and  only  the  goalies 
and  a  few  stray  players  picking  flowers  are  found  elsewhere.  As  the  IC  enters  the 
Information  Age  and  data  come  in  at  an  enormous  rate,  the  IC  also  appears  to  be 
constantly  playing  “clusterball.”  The  IC  is  sized  to  handle  a  single  crisis  in  a  sin¬ 
gle  nation.  When  there  is  no  apparent  crisis,  the  assets  are  spread  everywhere  at  a 
level  to  handle  the  pace  of  current  intelligence  and  maybe  a  bit  of  warning.  When 
a  crisis  comes,  most  of  the  assets  move  to  the  crisis,  and:  (1)  since  there  was  little 
warning  intelligence  being  done  on  the  crisis  area,  the  team  attempts  to  do  catch¬ 
up  on  the  warning  that  should  have  been  ongoing  in  that  area,  and  (2)  everywhere 
outside  the  crisis  situation  is  then  so  understaffed  that  partial  current  intelligence 
is  being  done  and  no  warning  at  all.  Should  a  crisis  arise  in  a  new  area,  the  cycle 
repeats  but  with  less  warning  and  context  than  before  because  the  normal  com¬ 
plement  of  analysts  on  the  new  crisis  area  is  less  by  having  been  pulled  off  to  the 
old  crisis  area.  As  the  IC  moves  from  crisis  to  crisis,  the  ability  to  do  warning 
becomes  less  and  less.  But  somehow  we  must  be  able  to  get  past  this  if  we  are 
ever  going  to  provide  strategic  warning. 

Furthermore,  analysts  have  virtually  no  time  to  analyze  information  on  threats 
involving  other  than  war  or  terrorist  attack.  Threats  such  as  economic,  technical, 
or  political  infrastructure  remain  unassessed.  As  we  have  seen,  strategic  analysis 
requires  integration  of  knowledge  about  the  adversary’s  infrastructure  including 
logistics,  politics,  and  technical  issues. 

It  is  almost  impossible  to  give  too  much  stress  to  the  importance  of 
the  most  meticulous  and  exhaustive  examination  of  all  available 
information  prior  to  reaching  warning  judgments.  It  is  erroneous  to 
presume  that  all  research  will  automatically  be  accomplished  in  a  cri¬ 
sis  or  budding  crisis  situations,  or  that  the  organization  and  distribu¬ 
tion  of  work  within  the  office  or  offices  involved  is  necessarily 
adequate  for  the  purpose...  The  inadequate  examination  of  available 
evidence  has  been  a  contributing  cause  to  nearly  every  warning  fail¬ 
ure  and  in  some  cases  should  probably  be  considered  the  major  cause 
of  failure.67 

Strategic  warning  must  be  proactive,  actively  building,  testing,  discarding  and 
rebuilding  hypotheses.  The  ultimate  goal  of  strategic  analysis  is  to  be  able  to  pro¬ 
vide  actionable  guidance  early  enough  so  that  the  situation  can  be  changed  before 
it  becomes  a  crisis. 
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The  mere  fact  that  a  “crisis  action  team”  needs  to  be  formed  is  an  indicator 
of  the  failure  of  strategic  warning.  For  if  there  were  prior  indication  of  the 
impending  “crisis,”  it  would  have  been  evident  that  such  a  team  was  needed 
prior  to  the  crisis. 

As  a  former  submariner,  I  must  contend  that  the  true  indicator  that  strategic 
warning  and  deterrence  is  working  properly  goes  even  a  step  further...  The  best 
indicator  of  an  IC  that  is  providing  satisfactory  strategic  warning  is  that  nothing 
happens.  Every  submariner  knows  that  the  only  way  a  submariner  will  ever  make 
the  news  or  show  up  on  CNN  is  if  he  fails  at  his  job.  In  peacetime,  submariners 
are  invisible  unless  they  collide  with  someone  or  run  aground.  Even  in  wartime, 
submarine  successes  are  proactive — behind  enemy  lines  where  only  the  result 
may  be  important,  and  with  few  or  no  BDA  photos.  In  fact,  every  submariner 
(especially  those  responsible  for  nuclear  weapons)  understands  that  the  mere  fact 
that  a  war  starts  means  that  he  has  failed  in  his  primary  mission — deterring  a  war. 

Similarly,  I  contend  that  in  the  Age  of  WMD  and  terrorism,  the  standard  for 
the  Intelligence  Community  must  be  to  provide  strategic  warning  such  that 
NOTHING  HAPPENS.  From  the  standpoint  of  the  IC: 

■  The  only  acceptable  WMD  attack  is  one  that  never  happens. 

■  The  only  acceptable  Weapon  of  Mass  Destruction  is  one  that  is  never 
built. 

■  The  only  acceptable  terrorist  attack  is  one  that  never  happens. 

■  The  only  acceptable  terrorist  WMD  program  is  one  that  is  never  built. 

MDA  can  provide  a  tool  for  strategic  warning  only  if  there  are  enough  assets 
and  time  to  build  the  6-D  MDA  model  of  the  adversary  and  to  use  that  model  for 
actionable  intelligence  production. 

It  is  possible  to  examine  all  available  information  and  still  not  to  under¬ 
stand  its  significance  in  relation  to  intentions...  Some  relevant  informa¬ 
tion  is  likely  to  come  from  highly  classified  sources — such  as  covertly 
acquired  military  documents — and  therefore  has  been  extremely 
restricted  in  distribution.  Some  developments  are  likely  to  be  highly 
technical  and  understood  by  very  few  persons,  but  their  interpretation 
and  integration  with  other  information  can  be  critical  to  an  understand¬ 
ing  of  what  is  really  happening...  In  warning  episodes,  the  need  of 
the  community  for  expert  assistance  in  a  whole  range  of  military 
subjects — and  to  a  lesser  extent,  political — skyrockets.68 
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To  make  matters  worse,  even  the  collected  data  and  the  6-D  model  may  be 
uninterpretable  if  the  data  are  outside  the  analyst’s  area  of  expertise.  Therefore,  to 
work  at  all,  MDA  must  be  done  by  a  team  of  analysts. 

A  system  of  systems  is  a  set  of  different  systems  so  connected  or 
related  as  to  produce  results  unachievable  by  the  individual  systems 
alone.69 

Cooperation  is  the  answer,  but  how  can  we  build  cooperation  in  the  IC? 

Another  major  stumbling  block  to  Information-Age  analysis  is  the  mismatch 
of  analytical  methods  and  organizations  with  IT  tools.  The  most  prevalent  failure 
mode  has  been  the  introduction  of  next-generation  tools  into  current  organiza¬ 
tions  using  current  intelligence  methods.  This  “drive-by”  dumping  of  new  tech¬ 
nologies  onto  analysts  with  no  thought  about  how  they  interface  with  analytical 
methods  and  organizations  results  in  frustrated  analysts  who  now  have  “new” 
tools  that  they  are  expected  to  use  that  do  not  work  and  frustrated  managers  who 
invested  in  new  tools  that  they  cannot  sell  to  their  subordinates.  A  few  simple 
examples  of  this  kind  mismanagement: 

■  Buying  “one-size-fits-all”  business  applications  under  the  COTS  pro¬ 
gram  and  implementing  them  with  no  thought  to  how  they  apply  in  the 
IC.  For  example,  in  MS  Word  when  an  analyst  types  “(C)”  to  denote  a 
Confidential  paragraph,  the  computer  changes  that  “(C)”  into  “(c)”  for 
copyright;  when  the  analyst  then  hits  “Enter”  at  the  end  of  that  para¬ 
graph,  the  computer  may  also  put  a  “(D)”  to  “help”  the  “outline” 
expected  to  continue  in  the  new  paragraph.  Very  few  programs  are 
ever  customized  to  fit  analysts’  needs  prior  to  appearing  on  their  com¬ 
puter  desktops. 

■  No  thoughts  of  consolidating  individual  proprietary  software  into  a 
single  system.  Analysts  cannot  understand  why  there  is  computer  tech¬ 
nology  to  identify  terrorists  by  TV  in  aiiports,  but  that  the  computer 
system  they  are  using  requires  as  many  as  14  separate  passwords  just 
to  do  their  job.  Why  cannot  a  system  be  implemented  that  recognizes 
only  a  single  password  for  a  single  analyst? 

■  No  thoughts  of  interfaces  between  software  on  the  system.  Currently  at 
DIA  the  “Global  Database”  is  called  WebSafe  and  the  best  tool  that 
analysts  could  use  for  a  “Shoebox”  is  Pathfinder;  however,  the  only 
way  to  transfer  “relevant”  items  identified  in  WebSafe  to  Pathfinder 
for  further  analysis  is  for  the  analyst  to  E-mail  the  individual  messages 
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to  himself  then  write  his  own  macro  tool  to  enter  them  in  Pathfinder. 
Without  an  easy-to-use  interface  between  the  agency’s  “retrieval”  tool 
and  its  “analysis”  tool,  very  few  analysts  use  Pathfinder,  but  there  is  no 
management  chain  to  require  the  two  independent  contractors  to  link 
their  tools. 

Unless  new  methodologies  are  already  in  place  and  the  organizations  are  reori¬ 
ented  to  use  them,  tools  development  will  be  as  useful  to  an  analyst  as  a  new 
DVD  player  would  be  to  a  music  lover  who  owns  several  hundred  records  and 
cassettes.  Music  lovers  don’t  care  what  the  format  is,  so  long  as  they  can  listen  to 
the  music.  Analysts  don’t  care  what  the  format  is,  so  long  as  they  can  recall  and 
read  the  relevant  documents  in  their  shoebox.  However,  to  implement  such  a  sys¬ 
tem  requires  cooperation  between  analytical  organizations  and  the  IT  organiza¬ 
tions  and  contractors  that  support  them. 

The  Digital  Production  System  (DPS)  was  a  10-year  development  by 
the  Defense  Mapping  Agency  (DMA)  to  deliver  an  end-to-end  digital 
processing  pipeline  for  production  of  mapping,  charting,  and  geodesy 
products,  [p.  50]...  For  the  DPS  program  management,  full  realiza¬ 
tion  of  the  level  of  resources  required  and  the  extent  of  expertise 
needed  to  make  a  SOS  [System  of  Systems]  out  of  a  set  of  individual 
systems  did  not  come  until  the  beginning  of  the  IOC  integration 
activities,  [p.  1 10]...  “We  had  some  idea  of  how  many  (people)  were 
needed  and  did  in  fact  program  for  them,  but  what  was  unknown  was 
the  amount  of  information  people  had  to  absorb  and  understand.”70 

Again,  cooperation  is  the  answer,  but  how  can  we  build  cooperation  in  the  IC? 

Orienting  Is  More  Important  Than  Deciding 


// 

COMMENT 

Up  to  this  point  we  have  shown  orientation  as  being  a  critical  element  in  com¬ 
mand  and  control — implying  that  without  orientation  there  is  no  command  and 
control  worthy  of  the  name. 
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VERY  NICE 


But,  simply  stated,  what  does  this  comment  and  everything  else  we’ve  dis¬ 
cussed  so  far  tell  us  about  command  and  control? 

// 

ILLUMINATION 

□  The  process  of  observation-orientation-decision-action  represents  what 
takes  place  during  the  command  and  control  process — which  means  that 
the  O-O-D-A  loop  can  be  thought  of  as  being  the  C&C  loop. 

□  The  second  O,  orientation — as  the  repository  of  our  genetic  heritage,  cul¬ 

tural  tradition,  and  previous  experiences — is  the  most  important  paid  of 
the  O-O-D-A  loop  since  it  shapes  the  way  we  observe,  the  way  we 
decide,  the  way  we  act. 

IMPLICATION 

□  Operating  inside  adversary’s  O-O-D-A  loop  means  the  same  thing  as 
operating  inside  adversary’s  C&C  loop.71 

// 

I  suggest  that  we  can  build  organizations  for  the  Information  Age  based  on  Col 
Boyd’s  assessment,  but  we  must  remember  that  Col  Boyd  was  modeling  the  mili¬ 
tary  and  that  the  military  is  only  a  part  of  the  national  organization.  We  should 
consider  that  what  are  strategic  decisions  from  the  standpoint  of  the  military  are 
tactical  decisions  from  the  national  standpoint.  Therefore,  one  must  realize  that 
the  national  OODA  loop  transcends  just  military  organizations  and  decisions  and 
includes  civilian  ones  as  well.  And  in  the  national  OODA  loop,  the  IC  is  entrusted 
with  the  intelligence  half  (observing  and  orienting)  while  the  IC  consumers  are 
entrusted  with  the  operations  half  (deciding  and  acting). 

Therefore,  to  build  a  national  OODA  Cycle  for  the  Information  Age  we  need 
to  remember: 

■  The  intelligence  (00)  half  of  the  national  OODA  Cycle  is  the  respon¬ 
sibility  of  the  IC. 

■  The  IC  spends  billions  of  dollars  on  researching  and  improving  the 
Observe-Orient  part  of  the  cycle  but  virtually  all  the  dollars  go  into  the 
“Observe”  category  on  new  collection  methods  and  new  databases  in 
which  to  store  the  collected  data. 
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■  There  is  “Massive  Data”  going  into  the  databases  around  the  IC,  but 
only  the  same  Industrial-Age  knowledge  is  coming  out  of  those  data¬ 
bases. 

Therefore: 

■  It  is  the  Orientation  step  in  the  national  OODA  Cycle  that  is  broken. 

■  As  Col  Boyd  has  stated,  “the  second  O,  orientation — as  the  repository 
of  our  shared  hypotheses  and  models  of  the  world — is  the  most  impor¬ 
tant  part  of  the  OODA  loop  since  it  shapes  the  way  we  observe,  the 
way,  we  decide,  the  way  we  act.” 

■  The  only  way  to  “orient  the  arrows”  rather  than  merely  connect 

the  dots,  is  to  reorient  the  way  the  components  of  the  IC  interact  to 
Orient — build  hypotheses,  theories,  and  knowledge  from  those  data¬ 
bases. 


Toward  an  IC  that  Can  Orient  as  a  Team 

Orienting  is  analysis.  Strategic  analysis  orients  the  national  organization  to 
make  plans  not  only  for  the  current  OODA  Cycle  but  also  to  provide  new  insights 
to  be  able  plan  two  OODA  Cycles  ahead — one  logistics  cycle  and  the  following 
operational  cycle. 

Strategic  analysis  requires  methods,  tools,  and  organizations.  From  my  work 
on  a  variety  of  successful  and  unsuccessful  attempts  by  DIA  and  the  IC  to  build 
intelligence  on  Information  Technology,  I  have  noted  that  the  interdependence  of 
methods,  tools,  and  organizations  has  led  to  a  vicious  cycle  that  has  derailed  vir¬ 
tually  every  effort  to  move  intelligence  analysis  into  the  Information  Age.  New 
analytical  methods  require  new  computer  tools  that  require  new  organizational 
interrelationships  that  require  new  analytical  methods... 

The  single  most  important  insight  into  making  MDA  a  reality  (as  demonstrated 
by  the  accompanying  case  studies)  was  the  realization  that  a  new  methodology 
can  be  implemented  with  current  tools  and  organizations  if  the  analysts  involved 
desire  (or  are  allowed)  to  take  the  time  to  build  new  methods  by  reorienting:  from 
collection-driven  analysis  to  hypothesis-driven  analysis  using  MDA;  from  soft- 
ware-driven  tools  usage  to  methodology-driven  tools  usage;  and  from  organiza¬ 
tion-driven  teamwork  to  hypothesis-driven  teamwork. 

From  Collection-Driven  Analysis  to  Hypothesis-Driven  Analysis 

Step  1  toward  warning  analysis  for  the  Information  Age  is  methodology — 
modeling  the  adversary.  Multidimensional  analysis  is  a  first  step  in  that  direction. 
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From  Software-Driven  Tools  Usage  to 
Methodology-Driven  Tools  Usage 

Step  2  toward  warning  analysis  for  the  Information  Age  is  tools — modeling 
how  we  model.  Given  a  methodology,  one  can  build  tools  to  support  it.  Surpris¬ 
ingly,  current  tools  available  on  almost  any  computer  such  a  MS  Word  and  Pow¬ 
erPoint  can  support  hypothesis  testing  and  MDA — as  long  as  the  analysts 
involved  know  what  they  desire  to  do.  While  most  IT  experts  don’t  consider 
either  one  “state-of-the-art,”  when  compared  with  Newtonian  data  management 
tools — pencil  and  paper  and  real  paper  3x5  cards — MS  Word  and  Poweipoint  are 
amazing  tools.  Hypothesis  testing  requires  building  a  “shoebox”  and  a  “3x5  card 
deck,”  which  depend  only  on  having  the  capability  to  cut-and-paste  and  to  hyper¬ 
link.  MDA  requires  drawing  charts  (maps,  timelines,  and  organizational  charts), 
which  depend  only  on  having  capability  to  cut-and-paste  and  to  draw  block  dia¬ 
grams  and  annotate  imported  maps.  Therefore,  implementing  MDA  and  hypothe¬ 
sis  testing  is  doable  with  current  tools.  Certainly  it  will  become  easier  as 
methodology-driven  tools  become  available,  but  we  need  not  wait  until  then  to 
start  the  process. 

The  collector  in  the  field  who  elects  to  forward,  or  not  to  forward, 
some  fragment  of  information  to  his  home  office  is  making  a  judg¬ 
ment.  The  current  analyst,  who  decides  to  write  up  a  given  piece  of 
information,  or  not  to  do  so,  is  making  a  judgment  about  it.  The  man¬ 
ner  in  which  he  writes  up,  the  emphasis  he  gives  to  this  or  that  aspect 
of  it,  constitutes  another  judgment.  The  items  that  his  immediate 
supervisor  selects  to  include  in  a  briefing  for  the  senior  officials  of 
his  agency  or  department  are  the  result  of  another  judgment.72 

From  Organization-Driven  Teamwork  to 
Hypothesis-Driven  Teamwork 

Step  3  in  building  Warning  Analysis  for  the  Information  Age  is  to  “reorient  the 
arrows”  within  the  IC — modeling  ourselves.  Lessons  learned  from  two  IC-wide 
BW  analysis  projects  have  indicated  how  the  IC-organizations  need  to  be  reori¬ 
ented — but  not  necessarily  reorganized — to  implement  MDA  on  an  IC-wide  scale 
thereby  preventing  the  “confusion  and  disorder”  foreseen  by  Col  Boyd.  Today’s 
IC  is  collection-driven;  collectors  provide  raw  data  which  are  analyzed  by  collec¬ 
tion  analysts  (DO,  NSA,  FBIS,  and  NIMA)  and  those  data  enter  the  system  as 
intelligence  reporting.  The  repository  for  reporting  (each  individual  agency’s  ver¬ 
sion  of  a  “Global  Database”)  is  then  exploited  individually  by  the  entire  IC.  In 
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essence  the  collection  agencies  (DO,  NSA,  FBIS,  and  NIMA)  perform  the  Obser¬ 
vation  step  in  the  national  OODA  cycle,  the  IC  customers  perform  the  Decision 
step,  but  the  Orientation  step  is  done  catch-as-catch-can  independently  by  every¬ 
one  across  the  community  from  collectors  to  analysts  to  decisionmakers. 


How  is  it  that  Orientation — the  most  important  step  in 
the  OODA  cycle — is  the  one  with  the  least  support? 


The  Next  RMA  will  be  a  Revolution  in  Orientation 

A  re-examination  of  the  OODA  Cycle  itself  indicates  that  the  current  national 
version  of  the  cycle  is  built  on  Newtonian  thinking.  The  Newtonian  paradigm  was 
a  revolution  in  the  physical  sciences — that  is,  in  the  way  we  can  model  and 
understand  the  physical  world.  Accordingly,  the  Industrial  Age  revolutionized  the 
way  we  can  observe  and  measure  the  physical  world,  beginning  with  the  tele¬ 
scope  and  microscope  and  moving  onward  to  their  lineal  descendants  such  as  the 
satellite  camera  and  signal  interception  receivers,  and  also  the  way  we  can  act  to 
control  the  physical  world  beginning  with  the  steam  engine  to  propel  a  ship  and  a 
cotton  gin  for  mass  production  and  moving  onward  to  their  lineal  descendants, 
the  mass-produced  cruise  missile  and  smart  bomb. 

The  Newtonian  revolution  enabled  the  Observation  and  Action  steps  in 
the  OODA  Cycle.  Therefore,  current  projections  that  the  next-generation 
military  will  be  based  on  significantly  improved  Observation  through  sensor 
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technology  and  Action  through  more  advanced  delivery  devices  are  based  on 
Newtonian  thinking. 


The  major  paradigm  shift  from  Agricultural-Age  to  Industrial-Age  thinking  in 
land  warfare  came  during  the  Civil  War.  Early  in  the  war,  when  Lee  was  fighting 
Hancock  and  Meade,  he  was  able  to  prevail  due  to  their  Agricultural-Age  think¬ 
ing.  Ulysses  Grant  brought  land  warfare  into  the  Industrial  Age  with  maneuver 
based  on  the  railroad,  steamship,  and  telegraph  plus  “shock  and  awe”  based  on 
mass-produced  firepower  in  a  drafted  citizen  army.  While  current  weapons  are 
faster  and  more  powerful  with  longer  ranges,  the  doctrine  for  their  employment  is 
not  very  different  from  Grant’s  strategy.  For  example,  Sherman  marched  to  the 
Sea  for  much  the  same  reason  as  Rumsfeld  marched  to  Baghdad,  and  the  idea  of 
using  “precision”  munitions  was  very  much  the  same  at  the  Petersburg  Crater 
(where  a  tunnel  was  used  to  place  explosives  under  Confederate  positions)  and  in 
the  precision  attacks  on  Saddam  Hussein’s  bunkers.  This  continuity  in  Industrial- 
Age  warfare  is  mainly  due  to  the  lack  of  changes  in  the  Orientation  and  Decision 
steps  in  the  national  OODA  cycle.  The  use  of  intelligence  reporting  in  Orienting 
is  not  very  different  in  today’s  Pentagon  than  it  was  in  Grant’s  tent;  therefore,  one 
should  not  expect  today’s  Decisionmaking  to  be  any  more  complex  or  directed 
than  Grant’s  was. 
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The  Orientation-Decision  steps  in  the  national  OODA  Cycle  have  not  changed 
because  they  occur  in  the  organizational  world — not  the  physical  world.  That  is 
why  they  will  require  Quantum  thinking — not  Newtonian  thinking — to  improve. 

Common  wisdom  suggests  that  Revolutions  in  Military  Affairs  (RMAs)  are 
intertwined  with  technological  advances.  However,  the  current  RMA  seems  dif¬ 
ferent,  especially  when  one  reflects  on  the  trend  that  all  the  RMAs  that  changed 
our  ability  to  Observe  and  to  Act,  since  U.S.  Grant  brought  land  warfare  into  the 
Industrial  Age,  appear  to  be  sensor  and/or  weapons-related.  1  suggest  that  the  cur¬ 
rent  revolution  is  a  different  kind  that  is  more  akin  to  the  revolutions  brought 
about  by  the  invention  of  the  written  word  and  of  the  printed  word.  Rather  than 
expecting  this  revolution  to  change  the  way  we  Observe  and  Act,  we  should 
instead  look  to  its  changing  the  way  we  Orient  and  Decide. 

Communities  are  built  on  communication,  and  one  can  parallel  the  customary 
revolutions  that  follow  the  evolution  of  technology — which  change  the  Observa¬ 
tion  and  Action  steps  in  the  OODA  Cycle — with  another  kind  of  revolution  that 
follows  the  evolution  of  communication — which  changes  the  Orientation  and 
Decision  steps.  Humankind  evolved  organizations  using  language,  beginning 
with  the  spoken  word.  A  society  based  on  the  spoken  word  could  begin  to  build 
organizations  as  large  as  tribes  because  the  Decisionmaker,  the  king  or  chief, 
could  pass  orders  as  far  as  he  could  yell  or  one  of  his  followers  could  retell  a 
remembered  order  and  also  he  could  observe  as  far  as  his  followers  could  yell  or 
retell  a  remembered  observation. 

The  second  O,  orientation — as  the  repository  of  our  genetic  heritage, 
cultural  tradition,  and  previous  experiences — is  the  most  important 
part  of  the  O-O-D-A  loop  since  it  shapes  the  way  we  observe,  the 
way,  we  decide,  the  way  we  act.73 

But  the  tribe  would  flourish  only  if  the  Orienter  could  pass  remembered  expe¬ 
riences  on  to  the  next  generation — where  the  best  hunting  grounds  were,  how  one 
could  tell  by  the  stars  or  length  of  day  when  to  start  moving  south  for  winter  or 
even  how  to  tell  which  way  South  is.  Societies  began  to  have  two  kinds  of  lead¬ 
ers — a  Soldier  or  Strongman  who  was  responsible  for  organizational  Decisions 
and  a  Teacher  or  Wiseman  who  was  responsible  for  organizational  Orientation. 
Advances  that  empowered  control  over  the  physical  world  also  empowered  the 
Strongman — fire,  tools,  domesticated  animals,  and  crop  cultivation.  Societies 
grew  larger  but  were  still  limited  by  the  oral  tradition;  the  cultural  tradition  or 
organizational  world  model  was  limited  by  what  could  be  remembered — by  a 
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messenger  to  and  from  the  edges  of  the  tribal  lands  or  by  the  Wiseman  and  his 
proteges  to  the  next  generation. 

With  the  invention  of  the  written  word — again  a  technological  advance — tribes 
could  become  Empires  as  the  Babylonians,  Egyptians,  Chinese,  and  Romans  all 
showed.  The  Strongman  could  receive  observations  written  in  remote  parts  of  the 
empire  and  send  orders  to  the  ends  of  the  empire  written  as  royal  decrees.  But  the 
written  word  diffused  the  power  of  the  Wiseman  to  a  class  of  priests  and  teachers 
who  would  maintain  the  organizational  Orientation  as  written  texts  in  temples 
and  libraries.  But  empires  could  flourish  because  societies  could  remember — and 
orient — over  generations  through  the  written  word. 

With  the  invention  of  the  printed  word,  the  role  of  the  Strongman  did  not 
change  very  much  but  the  power  of  the  Wiseman  was  markedly  affected.  One  of 
the  financial  backers  of  Gutenberg’s  project  to  build  a  printing  press  was  a  Cardi¬ 
nal  who  believed  that  when  everyone  could  read  from  an  identical  Bible,  the 
power  of  the  Pope  would  increase.  But  instead,  the  power  of  the  Wiseman  was 
again  diffused  down  another  level — to  the  bourgeoisie — and  to  three  differing 
kinds  of  Wisemen  who  were  the  Orienteers  for  society.  Clergy  like  Martin  Luther 
and  Calvin  could  print  their  own  version  of  the  Bible  and  begin  the  Protestant 
revolution;  scientists  like  Newton  and  Leibnitz  could  trade  ideas  by  writing  books 
that  all  could  read  and  begin  a  scientific  revolution;  and  political  activists  like 
Thomas  Paine  and  John  Adams  could  spread  new  ideas  by  printing  pamphlets 
and  newspapers.  It  was  this  orientation  revolution  that  provided  a  new  cultural 
tradition  shared  by  the  printed  word  that  then  served  as  the  basis  for  the  coming 
Industrial  Age. 

I  suggest  that  the  invention  of  electronic  communications  and  the  resulting 
development  of  the  hyperword  is  the  technology  that  portends  to  start  a  new  revo¬ 
lution  as  large  as  those  brought  about  by  the  spoken  word,  written  word,  and 
printed  word.  And  as  was  seen  in  those  revolutions,  I  expect  that  the  core  of  that 
revolution  will  center  on  Orientation — how  we  will  build  a  new  kind  of  shared 
cultural  tradition  built  on  the  hyperword. 

Therefore,  the  key  to  improving  the  all-important  Orientation  step  is  in  reori¬ 
enting  current  organizations.  And  based  on  the  previous  orientation  revolutions,  I 
expect  that  the  effect  of  the  hyperword  will  be  to  empower  the  Wiseman  rather 
than  the  Strongman  and  diffuse  that  power  down  yet  another  level.  In  short,  I  sug¬ 
gest  that  the  key  to  the  Information  Age  will  be  to  empower  the  analyst — by  con¬ 
necting  or  networking  him  or  her  with  evidence  to  test  hypotheses,  with  other 
analysts  to  test  hypotheses  cooperatively,  with  collectors  to  bring  new  data  to 
support  or  refute  those  hypotheses,  and  with  customers  to  provide  strategic  and 
well  as  tactical  warning. 
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Empowering  the  Analyst 


As  shown  above,  information  flow  in  the  current  IC  is  streamlined  from  collec¬ 
tor  to  customer,  from  observer  to  decisionmaker.  Its  hierarchical  nature  is  exactly 
what  one  would  expect  for  an  organization  in  an  unchanging  environment  like  the 
Cold  War  where  all  agreed  on  a  common  world  model  (orientation)  of  a  two- 
player-zero-sum-game.  But  in  a  time  of  change,  a  network  is  much  smarter  in 
building  a  new  world  model  (orientation).  In  a  new  orientation  revolution  that  is 
being  built  on  the  hyperword,  one  would  also  expect  that  a  new  kind  of  Wisemen 
would  be  critical  and  a  new  kind  of  medium  of  communication  will  emerge — 
much  like  the  written  manuscript  or  printed  book.  Lessons  learned  from  two 
recent  team  experiments  in  BW  analysis  suggest  the  first  steps  toward  the  new 
way  of  national  Orientation  will  depend  on  empowering  analysts  to  build  a  web- 
based  “hyperbook.”  And  I  suggest  that  the  first  “hyperbooks’  will  be  websites 
that  can  present  a  6-D  hierarchical  MDA  model  of  the  world. 


Integrated  Analysis  Works! 


COLLECTORS  HUMINT  SIGINT 


OSINT  IMINT 
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The  organization  of  the  IC  in  this  new  worldview  is  the  same,  only  the  orienta¬ 
tion  is  different  and,  therefore,  lines  of  communication  that  enable  the  organiza¬ 
tions  to  work  as  an  “orientation  team”  are  also  different. 

Again,  it  is  important  to  note  that  the  Orientation  step  is  the  one  that  needs  fix¬ 
ing  and  that  Cynthia  Grabo’s  “strategic  warning,”  Col  Boyd’s  “orientation,”  and 
my  “models”  are  different  views  on  the  same  important  concept — an  organization 
can  only  make  decisions  that  are  as  smart  as  the  common  worldview  that  is 
shared  by  the  “Wisemen”  of  that  organization. 

How  will  this  new  kind  of  Orientation  for  the  national  OODA  Cycle  occur? 

In  the  reoriented  IC,  intelligence  will  be  hypothesis-driven  (employing  Top- 
Down  models)  rather  than  collection-driven  (employing  Bottom-Up  models).  It 
will  also  be  proactive  (building  a  worldview  by  modeling  wherever  the  hypothe¬ 
sis  testing  Research  Cycle  leads)  rather  than  reactive  (building  a  worldview  in 
response  to  customer  tasking). 

The  key  is  providing  the  all-source  analysts  the  time  and  tools  they  need  to 
build  an  MDA  model  of  the  target  nations  or  organizations.  This  common  model 
is  then  shared  upward  and  downward  in  the  old  information  flow  pattern  but  with 
added  links.  The  common  MDA  model  is  posted  as  a  website  on  Intelink  based 
on  the  6-D  hierarchical  MDA  model. 

Experiments  in  posting  an  MDA  WMD  model  on  Intelink  empowered  every¬ 
one  across  the  IC  who  was  part  of  the  project.  But  this  depended  on  the  all-source 
analysts  to  provide  guidance  and  orientation: 

■  Since  DIA  took  responsibility  for  posting  the  common  model  on  an  Intelink 
site,  CIA  and  DIA  analysts  needed  to  work  more  closely.  DIA  needed  to 
ensure  that  the  model  posted  represented  community  consensus  (or  noted  com¬ 
munity  disagreements  where  needed),  and  CIA  needed  to  monitor  the  site  to 
again  ensure  that  the  site  reflected  common  assessments  but  also  to  ensure  that 
they  reflected  reporting  above  the  classification  of  the  site  (since  such  sensitive 
reporting  is  usually  in  the  realm  of  the  CIA  analyst). 

■  The  first  level  of  intelligence  posted  was  strategic  analysis  that  provided  quick 
and  easy  availability  of  key  assessments  to  both  civilian  and  military  policy¬ 
makers. 

■  The  second  level  of  intelligence  posted  contained  detailed  descriptions  from 
MDA  that  included  organizational  histories  and  resumes  of  key  WMD  person¬ 
nel  including  those  that  were  assessed  to  be  only  dual-use  and  not  currently  a 
part  of  the  WMD  program.  This  level  of  information  sharing  helped  provide 
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detailed  feedback  to  the  collection  analysts  and  collectors  for  much  improved 
collection  targeting. 

■  The  most  surprising  result  was  that  after  about  a  year  into  the  experiment,  the 
all-source  analysts  began  getting  fewer  questions  and  fewer  taskers  from  cus¬ 
tomers  even  though  MDA  concentrates  on  building  models  rather  than  directly 
addressing  customer  concerns.  The  proactive  history  and  context  of  the  WMD 
program  is  so  much  more  detailed  using  MDA  that  new  information  is  much 
easier  to  orient  within  that  larger  context.  Thus,  questions  from  customers 
could  usually  be  answered  by  providing  the  URL  to  the  appropriate  Intelink 
posting.  Thereafter,  the  number  of  questions  dropped  dramatically,  but  the 
ones  that  came  in  were  much  more  informed  because  those  customers  already 
had  a  broader  context  from  what  was  posted  on  Intelink. 

The  two-year  IC-wide  MDA  effort  has  led  to  the  identification  of  four  new  bio¬ 
technology  facilities  and  localization  of  four  known  BW  facilities  in  the  target 
country  as  well  as  facilitating  building  an  organizational  chart  and  list  of  key 
players  in  that  country's  BW  program. 

I  suggest  that  the  current  IC  organization  is  adequate  to  bring  intelligence  into 
the  Information  Age.  By  reorienting  the  lines  of  communication  from  hierarchi¬ 
cal  (taskers  flowing  down  and  reporting  flowing  up)  to  network-like,  the  IC  can 
provide  strategic  warning  in  a  world  of  WMD  and  terrorism.  The  key  to  that  is 
concentrating  on  fixing  the  Orientation  Step  in  the  national  OODA  Cycle.  And 
the  key  to  that  is  empowering  the  collection  analyst  to  become  the  “Wiseman”  for 
Observing  and  empowering  the  all-source  analyst  to  become  the  “Wiseman”  for 
Orienting. 
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Chapter  12 


GETTING  THERE  FROM  HERE 

We  have  the  methods,  tools,  and  organizations  to  reorient  the  IC  toward  Infor¬ 
mation-Age  intelligence  that  can  build  strategic  warning.  Can  we  find  the  leader¬ 
ship  to  get  there? 

How  can  we  reorient  our  intelligence  process  to  think  strategically  given  that 
we  have  organizations  that  are  designed  to  act  tactically? 

From  Industrial- Age  Reacting  to  Information- Age  Thinking 

As  intelligence  collection  becomes  more  sophisticated,  voluminous  and 
expensive,  and  devices  multiply  for  the  rapid  reporting  and  community-wide 
exchange  and  display  of  the  latest  information,  we  must  take  care  that  we  do  not 
lose  sight  of  what  warning  really  is:  the  considered  judgment  of  the  finest  analytic 
minds  available,  based  on  an  exhaustive  and  objective  review  of  all  available  indi¬ 
cations,  which  is  conveyed  to  the  policy  official  in  sufficiently  convincing  lan¬ 
guage  that  he  is  persuaded  of  its  validity  and  takes  appropriate  action  to  protect 
the  national  interest.74 

// 


NOW  WE  CAN  SEE  BY 
GOING  BACK  TO  THE  BEGINNING 

The  Strategic  Game 
is  one  of 

Interaction  and  Isolation 

A  game  in  which  we  must  be  able  to  diminish  adversary’s  ability  to  communi¬ 
cate  or  interact  with  his  environment  while  sustaining  or  improving  ours. 75 

// 

In  the  new  age  of  WMD  and  terrorism,  the  IC  is  faced  with  an  unprecedented 
challenge:  How  can  it  provide  strategic  warning  in  a  world  of  WMD  where  a 
massive  attack  from  half-a-world  away  can  occur  minutes  from  now?  How  can  it 
provide  tactical  warning  in  a  world  of  terrorism  where  adversaries  who  looked 


74  Grabo,  169. 
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peaceful  minutes  ago  can  attack  inside  the  U.S.  minutes  from  now?  The  first  step 
to  meeting  this  challenge  comes  from  understanding  the  difference  between  cur¬ 
rent  intelligence,  tactical  warning,  and  strategic  warning: 

■  Current  Intelligence  —  matching  recently  collected  intelligence 
against  warning  indicators  to  predict  the  next  actions  of  the  adversary. 

■  Tactical  Warning  —  warning  of  potential  actions  by  an  adversary  to 
which  a  response  can  be  mounted  with  current  resources. 

■  Strategic  Warning  —  warning  of  potential  actions  by  an  adversary  to 
which  a  response  will  require  significant  reallocations  of  resources. 

Tactical  warning  is  possible  from  knowledge  of  what  the  adversary  is  doing 
now — if  one  can  build  knowledge  of  not  only  the  weapons  he  has  available  but 
also  the  people  and  organizations  that  will  employ  them.  If  we  can  know  what 
they  currently  have,  we  can  decide  what  we  can  do  in  response  with  what  we  cur¬ 
rently  have.  But  for  strategic  warming,  we  need  first  to  get  inside  his  head  and  sec¬ 
ondly  to  get  inside  our  own  heads.  The  strategic  OODA  Cycle  begins  with  a  plan 
to  reallocate  resources  to  build  a  new  infrastructure  then  moves  on  to  a  plan  to  use 
that  new  infrastructure. 

Strategic  warning  requires  understanding  the  adversary’s  strategic  plan  and 
that  plan  must  begin  with  a  decision  to  build  a  new  infrastructure.  To  employ 
WMD  one  first  needs  to  build  them.  To  employ  CBRNE  (chemical,  biologi- 
cial,  radiological,  nuclear  and  explosive)  weapons  in  a  terrorist  attack  one  first 
needs  to  build  them.  Therefore,  the  warning  analyst  needs  not  only  to  know 
the  adversary’s  capabilities,  what  he  can  do  now,  but  also  his  intentions,  what 
he  is  planning  to  do. 


If  we  want  to  assess  an  adversary’s  capabilities,  we  can  do  so  by 
“connecting  the  dots.” 

If  we  want  to  assess  an  adversary’s  intentions,  we  need  to  “orient 
the  arrows.” 


BUT,  those  warning  analyses  have  to  be  ready  before  the  crisis.  For  if  nations 
or  terrorists  use  WMD  to  start  the  crisis,  we  are  already  too  late. 

New  Assumptions  for  Information-Age  Intelligence 

I  have  indicated  a  path  toward  a  reoriented  IC  that  can  provide  strategic  warn¬ 
ing  in  a  world  of  WMD  and  terrorism.  The  good  news  is  that  getting  there  is  pos¬ 
sible  within  a  decade  given  leadership  that  can  transcend  Newtonian,  Industrial- 
Age  thinking  and  move  to  Quantum,  Information-Age  thinking. 
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From... 

Bigger  Faster  Technology, 

Fighting  against  Technologies,  and 
Instantaneous  data  leading  to 
instantaneous  decisions. 


From... 

Targeting  Objects. 
It’s  a  bipolar  world. 


It’s  “Us”  versus  “Them.” 

From... 

One  size  fits  all. 

Assessment  of  capabilities  built  on 
understanding  and  identifying 
things — weapons  and  the 
facilities  that  make  them. 


From... 

Intelligence  that  is  reactive, 
collection-driven,  and 
built  on  current  intelligence 
and  tactical  warning. 

In  tactical  thinking,  faster  is  better. 


To... 

Smarter  Thinking, 

Out-Thinking  Decisionmakers,  and 
Projecting  the  future  only  by 
knowing  the  past. 

History  Matters ! 

To... 

Targeting  Individuals. 

It’s  a  multi-polar  world  where  every 
nation,  organization,  and 
individual  has  distinct  goals 
and  decisionmaking 
processes  to  reach  those  goals. 
It’s  “Our  team”  working  together. 

To... 

It  all  depends. 

Context  is  critical. 

Assessment  of  intent  built  on  under¬ 
standing  people  and  the  organi¬ 
zations,  nations,  and  cultures 
they  built — for  it  is  people 
who  build  WMD  and  become 
teiTorists. 

To... 

Intelligence  that  is  proactive, 
hypothesis-drivien,  and 
built  on  strategic  warning. 

In  strategic  thinking,  smarter  is  better. 


True  strategic  warning  needs  to  plan  ahead  not  only  into  the  next  Decision 
Cycle  but  the  Decision  Cycle  beyond  that.  The  object  of  intelligence — just  like 
the  object  of  science — is  to  predict  the  future. 

Using  those  quantum  assumptions,  I  have  outlined  ways  to  model  the  adver¬ 
sary,  model  how  we  model,  and  model  ourselves  that  indicate  the  first  steps  to 
take  in  our  thousand-mile-journey  toward  an  Information-Age  IC.  We  have  the 
required  methods  and  the  required  tools  and  technologies.  We  even  have  the 
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required  organizations,  but  we  need  to  reorient  how  intelligence  thinks.  Again, 
based  on  lessons  learned  from  experiments  in  MDA  of  WMD  programs,  the  good 
news  is  that  such  a  process  is  possible  within  a  decade  should  we  reorient  and 
apply  ourselves  to  do  so. 
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Chapter  13 


TOWARD  AN  INFORMATION-AGE  IC: 

HOW  LONG  WILL  IT  TAKE? 

Changing  cultures  usually  requires  generations.  Can  we  reorient  IC  culture 
from  the  Newtonian  paradigm  to  a  Quantum  paradigm  in  a  shorter  time  than  the 
four  generations  it  took  the  Navy  to  go  from  sail  to  steam  or  to  go  from  segre¬ 
gated  to  integrated? 

From  Observations  Driving  Actions  to 
Orientation  Driving  Decisions 

Warning  is  an  intangible,  an  abstraction,  a  theory,  a  deduction,  a  percep¬ 
tion,  a  belief.  It  is  the  product  of  reasoning  or  of  logic,  a  hypothesis 
whose  validity  can  be  neither  confirmed  nor  refuted  until  it  is  too  late.76 


The  second  O,  orientation — as  the  repository  of  our  genetic  heritage,  cul¬ 
tural  tradition,  and  previous  experiences — is  the  most  important  part  of 
the  O-O-D-A  loop  since  it  shapes  the  way  we  observe,  the  way,  we 
decide,  the  way  we  act.77 

The  bad  news  is  that  reorienting  ourselves  will  not  be  easy.  Our  organizations 
are  set  up  on  an  Industrial-Age  model  that  emphasizes  Action  driven  directly  by 
Observation.  This  is  not  surprising  because  thinking  logically  within  the  Newto¬ 
nian  paradigm  centered  on  our  command  of  the  physical  world.  But  thinking  log¬ 
ically  in  the  emerging  quantum  paradigm  centers  on  our  command  of  the 
conceptual  world.  This  means  that  we  need  an  Information-Age  model  that 
emphasizes  Decisionmaking  driven  by  timely  Orientation.  The  leaders  in  the 
Industrial-Age  RMAs  were  “Strongmen”  or  “Soldiers”  who  made  decisions  and 
acted.  The  current  RMA  portends  to  be  an  orientation  revolution  like  the  one 
based  on  the  invention  of  the  printed  word  that  predated  and  drove  the  Industrial 
Age.  The  leaders  in  that  kind  of  revolution  were  “Wisemen”  or  “Teachers”  like 
Martin  Luther,  Isaac  Newton,  and  Thomas  Paine. 


76  Grabo,  4. 

77  Col  Boyd. 
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In  a  stable  world  hierarchies  work  best  and  the  “Soldier”  leads  by  emphasis  on 
the  physical  world — Observation  drives  Action.  In  a  rapidly  changing  world  net¬ 
works  work  best  and  the  “Teacher”  leads  by  emphasis  on  the  cognitive  world — 
Observation  drives  Orientation.  By  examining  two  RMAs  of  the  second  kind,  we 
can  see  that  such  reorientations  of  organizational  thinking  usually  take  several 
generations. 

We  have  met  the  enemy  and  they  are  us. 

Pogo 

Military  Technical  Revolutions  (MTRs),  which  change  the  world  by  changing 
technologies,  can  happen  rapidly.  The  early  Civil  War  battles  were  bloodbaths 
due  to  Industrial-age  technologies  even  though  the  generals  were  still  using  Agri¬ 
cultural-Age  tactics.  RMAs,  which  change  the  world  by  changing  how  organiza¬ 
tions  work,  happen  more  slowly.  Grant  needed  to  reorganize  the  way  armies  work 
to  bring  in  Industrial-Age  strategies.  Revolutions  in  Military  Culture  (RMCs), 
which  change  the  way  organizations  think  by  changing  the  way  that  individuals 
that  comprise  them  think,  by  comparison,  happen  at  a  glacial  pace. 

How  Long  Does  It  Take  to  Change  a  Culture? 

...  a  naval  captain  who  fought  in  the  Invincible  Armada  [1588]  would 
have  been  more  at  home  in  the  typical  warship  of  1 840,  than  the  average 
captain  of  1 840  would  have  been  in  the  advanced  types  of  the  American 
Civil  War  [186 1-1 865]. 78 

CAPT  Alfred  Thayer  Mahan 
From  Sail  to  Steam 

A  problem  with  paradigm  shifts  is  that  those  who  grew  up  in  the  old  paradigm 
have  a  very  difficult  time  reorienting  their  own  thinking  to  the  new  technologies 
and  organizations  built  on  them.  This  usually  means  that  an  MTR  can  become  an 
RMA  in  just  a  few  years  but  an  RMC  usually  takes  generations.  The  revolution  of 
the  U.S.  Navy  going  from  sail  to  steam  provides  an  example. 


78  Alfred  Thayer  Mahan,  From  Sail  to  Steam  (New  York:  Harper  &  Brothers,  1907),  3. 
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Robert  Fulton  sailed  the  steamship 
Clermont  on  the  Hudson  River  in  1807. 

The  ironclads  USS  Monitor  and  CSS 
Virginia  fought  in  1862.  However,  even 
after  successful  use  of  other  ironclad 
steam  Monitors  throughout  the  remain¬ 
der  of  the  war,  the  U.S.  Navy  was  still 
very  reluctant  to  give  up  its  sails.  The 
ability  to  sail  on  any  point  of  the  com¬ 
pass  at  will — even  into  the  wind  or 
when  becalmed — changed  the  tactical 
picture,  but  the  technology  outstripped 
the  tactics  and  organizational  thinking. 

This  period  of  history  was  marked  by 
the  days  of  the  “steam  sloop” — a  true  oxymoron.  The  Navy  even  replaced  the 
four-bladed  screws  on  many  ships  with  less  efficient  two-bladed  screws,  which 
could  be  lined  up  vertically  with  the  keel  to  increase  speed  when  the  ship  was 
under  sail.79 

In  the  Age  of  Sail  officer  candidates  were  trained  on-the-job  aboard  ship.  Since 
they  were  not  either  enlisted  (who  bunked  in  the  foc’sle-forecastle-or  bow  of  the 
ship)  or  truly  officers  (who  were  berthed  in  the  stern),  they  were  berthed  amid¬ 
ships — hence  Midshipmen,  a  name  that  persists  today.  Their  training  was  mostly 
informal,  usually  by  the  ship’s  chaplain,  and  they  learned  the  ropes  quite  literally 
by  climbing  masts  and  furling  sails.  However,  technology  and  scandal  changed 
that.  With  steamships  becoming  more  prevalent  throughout  the  fleet,  there  was 
concern  about  how  to  train  officers  on  boilers  and  screws  and  all  the  engineering 
principles  involved,  with  the  debate  focusing  in  the  1830s  on  whether  to  open  a 
school  to  do  so.  The  final  blow  to  shipboard  education,  however,  was  an  incident 
on  board  the  USS  Somers  in  1 842  in  which  a  Midshipman  and  two  enlisted  con¬ 
spirators  were  hanged  for  mutiny.  The  ship’s  Captain  was  cleared  of  any  wrong  in 
the  incident,  but  since  the  Midshipman  was  the  son  of  the  Secretary  of  War  and 
nephew  of  a  Navy  Captain,  the  ensuing  furor  led  to  the  foundation  of  the  U.S. 
Naval  Academy  in  Annapolis,  MD  in  1845.  Even  though  the  Naval  Academy  was 
founded  in  response  to  the  advent  of  steamships,  the  paradigm  shift  from  sail  to 
steam  was  incomplete  until  the  first  Midshipman  summer  cruise  was  made  on  a 
steam  vessel  in  19 10. 80 


79  Sea  Power:  A  Naval  History,  E.  B.  Potter,  ed.  (Annapolis,  MD:  Naval  Institute  Press,  1981), 
117-120,  128,  155-161. 

80  Sea  Power:  A  Naval  History,  1 12,  163. 
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Even  though  Fulton  steamed  the  Clermont  up  the  Hudson  River  in  1810,  the 
Navy’s  sail-to-steam  MTR  did  not  begin  for  another  generation  with  the  commis¬ 
sioning  of  the  first  steamships  in  the  1830s,  the  foundation  of  the  Naval  Academy 
in  1845,  and  the  Monitor- Virginia  clash  in  1862.  Even  then,  the  sail-to-steam 
RMC  did  not  truly  begin  until  CAPT  Mahan’s  book.  The  Influence  of  Seapower 
on  History,  began  to  reorient  the  Navy  in  the  1880s,  leading  to  the  true  steam 
Navy  with  President  Roosevelt’s  Great  White  Fleet  and  the  first  Naval  Academy 
steamship  summer  cruise  after  the  turn  of  the  century.  Thus  it  took  steamship 
technology  almost  a  century  before  it  became  an  integral  part  of  Navy  culture.81 

A  new  scientific  truth  does  not  triumph  by  convincing  its  opponents 
and  making  them  see  the  light,  but  rather  because  its  opponents  even¬ 
tually  die,  and  a  new  generation  grows  up  that  is  familiar  with  it. 

Max  Planck 

Why  the  resistance  to  change?  Why  does  it  take  generations  for  a  true  RMC? 
It  appears  that  most  people  solidify  their  worldview  and  way  of  thinking  before 
they  leave  school.  Whatever  they  learned  in  growing  up  and  in  formal  classes, 
they  later  put  into  practice  for  the  remainder  of  their  careers. 

Example  two  is  the  segregation-to-integration  revolution  in  the  U.S.  Navy.82 
President  Roosevelt  moved  to  integrate  the  Navy  in  1942,  but  even  then  integra¬ 
tion  only  started  at  the  Naval  Academy  under  duress  in  1945  with  the  admission 
of  the  first  Black  Midshipman,  Wesley  Brown,  who  graduated  from  the  U.S. 
Naval  Academy  in  1948.  Even  though  the  color-barrier  was  supposedly  broken,  it 
wasn’t  until  1969  that  the  fiftieth  Black  Midshipman  graduated.  And  even  then, 
by  1999,  the  Naval  Academy  could  only  boast  of  four  Black  graduates  who  had 
been  promoted  to  Admiral. 

Again  it  took  several  generations  to  go  from  RMA,  with  Roosevelt’s  order  to 
integrate,  to  RMC  with  a  totally  integrated  Navy.  President  Truman  reiterated  the 
integration  goal  with  an  executive  order  in  1948,  establishing  a  policy  of  equal 
treatment  and  opportunity  in  the  armed  forces,  but  integration  at  the  Academy  did 
not  really  occur  until  the  1970s  where  the  number  of  Black  graduates  rose  from 
only  three  in  1971  to  over  sixty  in  1977.  Academy  graduates  from  the  first  on- 
paper  integrated  classes  in  the  late  1940s  finally  became  the  Navy’s  senior  leader¬ 
ship — the  Admirals  with  about  thirty  years  service — in  the  mid  1970s.  They  were 
the  first  Naval  Officers  to  spend  an  entire  career  with  an  official  policy  of  integra- 


81  Sea  Power:  A  Naval  History,  162,  174,  192-193. 

82  John  W.  Bodnar,  “How  Long  Does  It  Take  to  Change  a  Culture?  Integration  at  the  U.S.  Naval 
Academy,"  Armed  Forces  and  Society  25,  no.  2  (Winter  1999):  286.  Cited  hereafter  as  Bodnar. 
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tion,  and  it  followed  that  they  were  the  first  Naval  Officers  to  truly  support  and 
implement  that  policy.  Also,  demographics  dictated  that  until  1975  there  were 
virtually  no  Black  officers  in  the  pool  of  Admiral  candidates.  The  fact  that  four 
Black  graduates  made  Admiral  by  1999 — drawing  off  the  classes  of  1948  to  1975 
which  graduated  only  178  Blacks  total — is  actually  a  credit  for  integration  in  that 
the  probability  of  an  individual  Black  making  Admiral  was  not  very  different 
from  that  of  a  white  classmate.83 

One  need  only  do  the  addition  to  track  the  progression  of  an  RMC:  changes 
brought  by  an  MTR  in  reference  year  zero  will  not  have  proponents  comfortable 
with  them  in  senior  leadership  until  almost  year  thirty  at  which  point  one  might 
expect  a  change  in  policy  and  organization  to  begin  an  RMA.  But  the  organiza¬ 
tion  will  not  “think”  in  the  new  paradigm  until  the  students  of  year  thirty  them¬ 
selves  become  senior  leadership. 

The  sail-to-steam  revolution  in  the  Navy  took  over  half-a-century.  The  Navy 
went  from  sail  to  steam  in  the  1840s;  the  first  Midshipman  “born  and  raised”  on 
steamships  did  not  make  Admiral  until  the  1870s,  including  Mahan,  who  would 
reorient  the  Navy  to  “thinking”  steamships,  but  it  was  not  until  the  early  1900s 
that  everyone  in  the  Navy  was  trained  by  the  first-generation  steamship  Admirals. 
The  progression  of  the  1845  founding  of  the  Naval  Academy  to  the  1910  Mid¬ 
shipman  steamship  cruise  follows  the  same  pattern:  it  took  Mahan,  an  1859 
Academy  graduate,  to  reorient  his  generation  before  they  assumed  leadership  and 
became  decisionmakers  based  on  a  steamship  orientation. 

The  segregation-to-integration  revolution  in  the  Navy  is  also  taking  half-a-cen- 
tury.  Naval  Academy  graduates  who  were  classmates  of  Wesley  Brown  in  1948 
“grew  up”  in  a  Navy  that  was  always  integrated — on  paper  at  least.  When  they 
became  Admirals  in  the  late  1960s,  going  from  “on  paper”  integration  to  true 
integration  was  not  an  issue  because  the  Navy  they  knew  was  always  integrated. 
The  first  truly  integrated  Academy  classes  of  the  mid-1970s  arc  finally  assuming 
senior  leadership  roles  as  Admirals  as  we  turn  into  the  new  century.  Not  only  is 
the  number  of  Black  Admirals  increasing  dramatically  because  of  the  larger  can¬ 
didate  pool  of  the  1970s  but  also  everyone  in  today’s  Navy  never  knew  a  time 
when  the  Navy  wasn’t  integrated.  Thus  the  reorientation  process  of  segregationist 
thinking  to  integrationist  thinking  is  finally  reaching  maturity  over  half-a-century 
after  Roosevelt’s  order. 


83  Bodnar. 
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When  Can  We  Expect  to  Reorient  from  Newtonian  Thinking 
to  Quantum  Thinking? 


Just  as  Multidisciplinary  Analysis  predicts  a  lengthy  process  for  an  adversary 
to  change  its  strategic  thinking,  examining  our  own  reorientations  to  new  strate¬ 
gic  paradigms  indicates  that  we  are  subject  to  the  same  cultural  and  institutional 
limitations  on  change.  To  predict  when  the  RMC  will  emerge  in  the  wake  of  the 
change  from  Industrial-Age  thinking  to  Information-Age  thinking,  one  again 
need  only  do  the  addition  and  demography. 

IF 

You  graduated  from  college 

Before  1965...  After  1980... 


You’re  more  comfortable  calculating 
than  computing. 

In  the  last  science  class  you  took, 
you  used  a  slide  rule. 

In  biology  class  you 
cut  up  dead  cats. 

You  live  in  the  world  of 
the  printed  word. 

Your  main  source  of  news  is 
a  newspaper  or  possibly 
network  TV 


You’re  more  comfortable 

computing  than  calculating. 

In  the  last  science  class  you  took, 
you  used  a  calculator. 

In  biology  class  you 
analyzed  DNA. 

You  live  in  the  world  of 
the  hyperword. 

Your  main  source  of  news  is 
CNN  or  possibly 
the  Web. 


You  are  most  comfortable  writing 
using  a  paper  and  pen 
and  the  written  word. 


You  are  most  comfortable  writing 
using  a  computer 

and  the  hyperword. 


The  MTR  for  the  Information  Age  began  in  the  1960s  with  the  advent  of 
computers  and  television  and  the  rise  of  institutional  science  in  the  U.S.  The 
defining  chasm  in  Newtonian  versus  Quantum  thinking  is  between  those  who 
graduated  from  college  prior  to  and  after  the  1970s.  Those  who  graduated  prior 
to  1970  can  no  more  think  in  terms  of  Information-Age  technologies  than  the 
sailing-ship  Admirals  who  learned  the  ropes  as  Midshipmen  on  board  ship  in 
the  1840s  could  build  pure  steamships  in  the  1870s  or  the  segregation-era 
Admirals  who  built  their  friendships  in  a  totally  white  Navy  of  the  1920s  could 
think  integration  in  the  1950s.  The  class  of  1975  is  now  just  past  fifty  years  old, 
which  means  that  virtually  all  our  senior  leadership  in  the  military  and  the  IC  is 
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drawn  from  a  generation  that  thinks  computers  are  glorified  typewriters  and 
biology  is  about  cutting  up  dead  cats. 

Projecting  the  process  of  the  Information-Age  reorientation  in  the  IC.  one  can 
predict  that  RMA  has  not  yet  begun — mainly  due  to  a  lack  of  leadership  comfort¬ 
able  in  the  Information-Age  paradigm.  One  can  project  that  the  “Mahan”  of  the 
coming  orientation  revolution  has  not  yet  “written  his  book”  (or  more  likely 
posted  his  website)  because  such  a  “Teacher”  needs  to  be  someone  who  could 
observe  and  reorient  in  a  world  dominated  by  Newtonian  thinking  but  who  “grew 
up”  in  the  era  of  TV  and  computers.  Cynthia  Grabo  and  Col  Boyd  were  almost 
there;  they  both  observed  and  oriented  in  an  Information- Age  world  dominated 
by  Industrial- Age  thinking;  but  neither  were  children  of  the  Information  Age. 

Projecting  from  the  sail-to-steam  and  segregation-to-integration  revolutions  in 
the  Navy  leads  to  a  rather  gloomy  picture.  The  Information- Age  MTR  began  in 
the  1960s.  but  the  RMA  is  just  beginning  as  young  leadership — class  of  1975  or 
later — who  are  younger  than  fifty,  begin  to  build  on  the  questioning  stalled  by 
forward-leaning  analysts  like  Grabo  and  Boyd  to  orient  and  build  a  plan  for  reori¬ 
enting  the  IC.  Unfortunately,  current  attempts  at  integrating  the  IC  by  “solving 
the  database  problem”  and  building  better  analysis  by  building  bigger  and  better 
satellites”  bring  to  mind  the  era  of  the  steam  sloop  or  the  era  of  an  “integrated” 
Naval  Academy  that  only  graduates  one  or  two  Black  Midshipman  a  year. 

The  completion  of  RMC  for  the  Information- Age  orientation  revolution — with 
the  advent  of  an  equivalent  indicator  such  as  the  “Great  White  Fleet”  or  the  first 
Black  Chief  of  Naval  Operations — likely  will  not  come  for  another  two  or  three 
decades.  That  will  require  the  rise  of  an  Information-Age  generation  of  leader¬ 
ship  (currently  still  in  college)  who  will  be  taught  quantum  thinking  by  the  stu¬ 
dents  of  the  Cynthia  Grabo,  Col  Boyd,  and  other  forward-leaning  thinkers.  Can 
we  afford  to  wait  that  long? 
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Chapter  14 


CAN  WE  SHIFT  A  PARADIGM  IN  A  SINGLE  GENERATION? 

Potentially  we  can  short-circuit  the  slow  pace  of  the  MTR-RMA-RMC 
progression  to  begin  to  build  an  Information-Age  IC  by  beginning  a 
program  to  capture  the  knowledge  of  senior  analysts  and  to  educate 
the  rising  analytical  leadership  to  reorient  the  IC.  But  we  must  take 
step  to  do  so  now  or  the  opportunity  will  be  lost  for  at  least  another 
decade. 

Potentially  there  exist  things  we  can  do  now  to  short-circuit  the  slow  pace  of 
MTR-RMA-RMC  progression.  In  my  hypothesis  for  reorienting  the  IC,  I  indi¬ 
cated  that  it  is  much  more  important  for  the  IC  to  build  a  pool  of  historians, 
librarians,  and  curators  than  to  continue  spending  its  budget  on  better  technology 
such  as  new  satellites  and  next-generation  computers.  Given  that  the  current  gen¬ 
eration  of  leadership  still  thinks  in  the  old  Industrial-Age,  “sailing  ship”  para¬ 
digm,  it  is  unlikely  that  they  will  place  an  over-riding  emphasis  on  fixing  the 
broken  Orientation  step  in  the  national  OODA  Cycle.  Since  they  are  ingrained 
with  an  over-riding  emphasis  on  Action  driven  directly  by  Observation,  the  best 
we  can  hope  for  in  at  least  the  next  decade  is  the  equivalent  of  a  “steam  sloop” — 
where  we  will  acknowledge  the  new  paradigm  without  letting  go  of  the  old.  The 
RMA  will  not  come  from  the  top  down,  but  perhaps  it  can  be  hastened  from  the 
bottom  up. 


Lead,  follow,  or  get  the  hell  out  of  the  way! 

Old  Navy  Saying 

The  key  to  reorienting  the  IC  is  building  a  cadre  of  WMD  and  terror  ism  ana¬ 
lysts  who  are  subject-matter-experts  on  the  history  of  their  particular  country  or 
teiTorist  group  as  well  as  their  particular  WMD  program,  who  routinely  use  MDA 
(or  a  more-developed  successor)  and  who  are  comfortable  doing  analysis  and 
production  based  on  the  hyperword.  For  convenience.  I’ll  call  these  the  First- 
Generation  Reorienters.  At  this  point  in  history,  such  analysts  are  virtually  impos¬ 
sible  to  find.  If  we  leave  the  process  of  training  new  ones  to  the  natural  changes  in 
IC-wide  leadership,  it  will  take  at  least  two  generations.  However,  given  a  curious 
demographic  distribution  of  analysts  in  the  IC,  there  may  be  a  way  both  to 
remember  that  history  matters  and  to  reorient  to  Information- Age  thinking  if  we 
act  very  soon. 

Demography  is  an  historical  discipline  used  by  both  biologists  and  political 
scientists  to  study  populations  and  to  predict  the  future  characteristics  of  an  ani- 
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mal  or  cultural  population  in  terms  of  the  age  distribution  of  its  members.  While  I 
have  not  yet  directly  incorporated  demography  into  MDA,  it  is  easy  to  do  so 
because  the  standard  demography  chart  looks  like  a  chemist’s  Maxwell-Boltz- 
mann  curve  and,  therefore,  like  an  organizational  chart  turned  on  its  side.  Age 
plotted  on  a  demographic  chart  is  a  reflection  of  experience  and  skills  so  that  the 
right-to-left  demographic  axis  for  a  population  approximates  the  bottom-to-top 
power  axis  on  an  organizational  chart. 

Over  the  next  10  years  approximately  50  percent  of  the  technical 
experts  in  the  Intelligence  Community  will  retire.  The  junior  analysts 
filling  these  positions  (assuming  the  positions  are  filled,  and  not  elim¬ 
inated)  may  have  the  technical  skills,  but  certainly  will  lack  the  expe¬ 
rience  and  the  issue-based  knowledge  of  their  predecessors.  The 
mature  Scientific  and  Technical  Intelligence  (S&TI)  analyst  is  a 
dwindling  species.  Mastering  the  implications  and  subtle  points  of 
S&TI — and  its  significance  for  country  and  regional  intelligence 
analysis — requires  years  of  study  and  experience.  Our  lost  S&TI  ana¬ 
lytical  capability  cannot  be  purchased  quickly,  nor  for  a  limited 
period,  and  will  literally  take  years  to  replace.  While  CW  S&T  shows 
a  modest  increase  over  the  [1991-2001]  period,  biological  warfare 
(BW)  S&T  resources  decline — a  surprising  finding,  considering  its 

•  •  84 

growing  importance. 

Scientific  and  Technical  Intelligence  Committee 

We  can  get  a  glimpse  of  the  future  of  the  IC  by  charting  its  demographics.  The 
key  for  the  next  decade  is  the  curious  bimodal  distribution  of  analysts  by  age 
which  follows  from  hiring  practices  over  the  last  generation.  During  the  Reagan 
administration  military  buildup,  the  IC  expanded  and  hired  many  young  analysts. 
Over  the  course  of  their  careers,  the  career  path  was  optimistic,  leading  to  high 
retention.  These  are  the  IC’s  Senior  Analysts,  now  in  their  50s  and  early  60s,  and 
they  represent  a  significant  portion  of  the  IC’s  analytical  assets.  During  the  course 
of  their  careers,  IC-wide  hiring  was  low  until  the  oldest  analysts  began  to  retire. 
Accordingly,  today’s  IC  has  a  bimodal  distribution  of  analysts  by  age:  Senior 
Analysts  in  their  50s  and  60s  and  Junior  Analysts  in  their  late  20s  and  30s  with 
very  few  analysts  in  the  35-  to  50-year-old  range. 

The  Senior  Analysts  embody  the  IC’s  corporate  knowledge  with  two  or  three 
decades’  worth  of  experience  as  subject  matter  experts  in  their  various  fields.  The 


84Scientific  and  Technical  Intelligence  Committee,  “The  Health  of  Scientific  and  Technical 
Intelligence:  A  Study  Conducted  by  the  Scientific  and  Technical  Intelligence  Committee.”  (April 
1998). 
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WMD  analysts  in  this  category  have  a  wealth  of  knowledge  on  their  target 
nations  as  well  as  on  traditional  S&T  knowledge  acquired  prior  to  entering  the 
IC.  As  such,  they  cannot  be  First-Generation  Reorienters  because  they  more 
likely  have  amassed  their  “shoeboxes”  in  paper,  or  at  best  MS  Word  files,  and  are 
not  likely  to  be  actively  involved  in  database  usage,  open-source  exploitation,  or 
MDA.  However,  their  knowledge,  both  what  they  know  and  what  they  have 
stored  in  their  “shoeboxes,”  represents  the  historical  baseline  needed  to  start  the 
MDA  process. 

On  the  other  hand,  the  young  analysts  arc  children  of  the  Information-Age  and 
very  computer  and  database  savvy.  From  anecdotal  observations  of  young  BW 
analysts,  I  have  noted  that  they  can  very  rapidly  use  both  classified  and  open- 
source  databases  to  build  a  “shoebox”  and  electronic  “3x5  card”  deck  if  given 
senior  analytical  guidance,  and  are  very  interested  in  the  IC’s  implementing  new 
computer  analytical  tools  for  their  use.  As  such  they  can  become  First-Generation 
Reorienters  if  they  can  be  educated  in  the  analytical  art  and  can  get  access  to  an 
historical  baseline  required  for  MDA. 


Strategic  thinking  and  strategic  planning  go  out  to  the  next  Decision  Cycle. 
The  most  effective  organization  is  one  that  can  execute  the  current  plan  as 
rapidly  and  efficiently  as  possible  while  simultaneously  rebuilding  itself  for 
a  new  plan. 


A  First  Step  to  Get  There  from  Here 

If  the  IC  can  change  its  emphasis  from  turning  outward  to  handle  customer 
taskers  to  turning  inward  to  rebuild  itself  for  the  Information  Age,  there  is  a  pos¬ 
sible  path  to  address  the  two  major  personnel  challenges  it  faces — but  by  empha¬ 
sizing  “teachers”  rather  than  “soldiers”  to  provide  the  leadership. 

The  first  major  challenge  to  reorient  the  IC  in  our  lifetime  is  to  capture  the 
knowledge  of  the  Senior  Analysts.  This  requires  two  parts: 

■  Senior  Analysts  need  to  mentor  young  analysts  to  transition  their  tacit 
knowledge  to  the  next  generation.  This  will  likely  require  hiring  more 
analysts  since  many  WMD  accounts  have  only  a  single  analyst 
assigned,  and  a  Senior  Analyst  cannot  mentor  a  young  analyst  on  that 
WMD  account  unless  the  young  analyst  is  available  and  not  required 
on  another  account  (where  he  or  she  has  no  senior  analytical  guid¬ 
ance),  or  is  assigned  to  a  “crisis  support  team.” 
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The  Changing  Face  of  the  IC 


The  curious  demographics  of  the  current  IC 
are  based  on  a  large-scale  hiring  of  analysts 
during  the  Reagan-era  defense  buildup  with 
little  replacement  since  then.  This  bimodal 
distribution  means  that  the  IC  faces  2  major 
personnel  challenges  over  the  next  decade. 


□  Senior  Analysts  are  retiring  at  an 
increasing  rate.  They  are  the 
“history”  of  the  IC.  Their  knowledge  must 
be  captured  both  by  mentoring  the  Rising 
Analytical  Leadership  and  by  archiving  in 
“3x5  cards”  in  Entity  databases. 


Rising  Analytical  Leadership  in  the 
IC  will  come  from  the  35-45  year  old 
analysts — old  enough  to  start  becoming 
“history”  for  the  IC  yet  young  enough  to 
build  the  new  kinds  of  databases  for  an 
In  formation -Age  IC.  These  analysts  are  the 
IC’s  most  precious  asset  for  the  future. 


NOTE:  distributions  are  idealized  and  not  based  on  an  actual  census. 


m  The  IC  needs  to  hire  enough  IT  and  analytical  support  contractors  to 
preserve  the  Senior  Analysts’  “shoeboxes”  and  extract  the  evidence 
from  them  into  a  standardized  “entity  database.”  Experience  from 
several  MDA  experiments  has  indicated  that  tools  to  perform  day-to- 
day  WMD  analysis  of  a  target  country  are  in  place  or  can  be  very 
shortly  in  the  pipeline,  BUT  turning  the  historical  record  from  the 
printed  word  (or  the  printed  word  merely  saved  in  electronic  format) 
to  hyperword  is  a  daunting  task  that  requires  additional  short-term 
help.  A  decade  after  the  advent  of  the  Internet  in  our  current  reorienta¬ 
tion  revolution,  we  are  at  the  equivalent  of  a  decade  after  Gutenberg 
printed  his  first  Bible:  printing  any  new  books  is  straightforward  as 
they  are  written;  but  it  is  only  after  we  have  gone  back  and  printed  ver¬ 
sions  of  all  the  written  books  in  the  libraries  that  enough  copies  will  be 
available  to  empower  the  “analysts”  like  Luther,  and  Newton,  and 
Paine. 


The  preservation  of  the  historical  record  represented  by  the  Senior  Analysts’ 
“shoeboxes”  must  be  addressed  now  because  any  time  a  Senior  Analyst  retires 
and  the  young  analyst  who  replaces  him  or  her  shreds  all  those  documents 
(because  they  are  merely  on  paper),  a  piece  of  our  corporate  knowledge  is  lost 
forever. 
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The  second  major  challenge  for  reorienting  the  IC  in  our  lifetime  is  empower¬ 
ing  the  Rising  Analytical  Leadership.  By  following  the  demographics  of  the  IC. 
we  can  see  that  a  decade  in  the  future  virtually  all  of  today’s  Senior  Analysts  will 
have  retired.  Given  the  gap  in  longevity  today,  that  means  that  over  the  next 
decade  the  mantle  of  “senior  analyst”  will  rapidly  move  from  analysts  who  are  in 
their  50s  today  to  analysts  who  in  their  30s  today,  meaning  that  the  IC’s  corporate 
knowledge  is  in  for  a  huge  drop — one  that  is  already  starting.  Furthermore,  there 
is  nothing  that  we  can  do  about  it  now  because  the  gap  in  hiring  over  the  last  two 
decades  cannot  be  repaired  in  any  way.  There  is  no  academic  or  industrial  pool  of 
“analysts”  like  there  is  of  lawyers  or  doctors  that  can  be  tapped  to  bring  in  experi¬ 
enced  analysts;  analysts  must  be  trained  from  scratch  by  the  IC.  There  is,  how¬ 
ever,  a  very  small  cadre  of  young  analysts  at  the  front  edge  of  the  demographic 
age  curve  who  are  the  Rising  Analytical  Leadership  for  the  Information- Age  IC. 

The  Rising  Analytical  Leadership  is  a  very  small  and  very  precious  part  of  the 
IC:  very  small  because  there  are  few  analysts  who  have  entered  the  IC  in  the 
1990s  and  have  stayed  for  five  to  ten  years  to  become  leaders,  and  very  precious 
because  these  are  the  only  candidates  to  become  First-Generation  Orienters. 
These  analysts  are  mature  enough  to  understand  the  analytical  process  and  have 
amassed  a  personal  knowledge  base  both  in  their  heads  and  in  their  “shoeboxes,” 
yet  young  enough  to  be  computer-  and  database-literate.  These  are  the  experts 
who  will  lead  the  IC  into  the  Information  Age. 

Unfortunately,  this  is  the  very  group  that  is  being  squeezed  out  of  the  IC  by 
Industrial- Age  personnel  policies.  There  is  no  career  pattern  for  the  Rising  Ana¬ 
lytical  Leadership.  On  one  hand,  they  have  hit  a  dead-end  waiting  for  the  Senior 
Analysts  to  retire  because  all  the  senior  billets  are  already  encumbered;  on  the 
other  hand,  they  have  begun  to  assume  responsibilities  well  beyond  their  experi¬ 
ence  level  due  to  the  huge  gap  in  leadership  ahead  of  them.  In  addition,  whenever 
there  is  a  “database”  problem  to  be  addressed,  it  is  those  analysts  who  are  tapped 
to  solve  it,  not  the  Senior  Analysts — who  are  considered  database  illiterates. 


Every  member  of  the  Rising  Analytical  Leadership — the  GS-13s  in  their 
late  30s  who  are  now  the  subject  matter  experts  on  WMD  and  terrorism 
accounts  IC-wide — who  leaves  the  IC  due  to  lack  of  career  advancement 
opportunities  is  a  potential  First-Generation  Orienter  who  cannot  be  replaced 
for  almost  two  more  decades. 


How  Long  Does  it  Take  to  Change  a  Culture?  It  Is  Up  to  Us 

A  multidimensional  analysis  of  the  IC  suggests  both  good  news  and  bad  news. 
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By  learning  the  lessons  of  Cynthia  Grabo  and  Col  John  Boyd  we  can  begin  to 
build  methods  and  tools  and  reorient  ourselves  to  provide  strategic  warning  in  an 
age  of  WMD  and  terrorism.  Multidisciplinary  Analysis  (MDA)  is  a  first-genera¬ 
tion,  Information-Age  method  that  can  serve  as  a  basis  for  building  better  meth¬ 
ods,  and  MS  Word  and  PowerPoint  are  powerful  tools  that  can  serve  as  a  basis  for 
building  better  tools  as  long  as  we  keep  in  mind  that  analysis  is  based  on  the 
research  OODA  Cycle  which  is  commonly  called  hypothesis  testing.  Experi¬ 
ments  in  employing  MDA  on  state -run  WMD  programs  and  terrorist  CBRNE 
programs  have  shown  that  the  methods,  tools,  and  organizations  are  in  place  for 
Information-Age  strategic  analysis. 

On  the  other  hand,  the  major  hurdle  to  an  Information- Age  IC  is  the  realization 
that  it  is  the  Orientation  step  in  the  national  OODA  Cycle  that  is  broken  and  that 
to  implement  Information-Age  strategic  analysis  the  IC  needs  to  reorient  itself 
from  an  emphasis  on  Observation-driven  Action  to  an  emphasis  on  Orientation- 
driven  Decisionmaking.  That  reorientation  requires  quantum  thinking  and  current 
IC  leadership  still  operates  on  Newtonian  thinking.  This  means  that  a  top-down 
reorientation  of  the  IC  cannot  begin  for  another  generation  when  the  current  lead¬ 
ership  retires  and  a  new  generation  of  senior  leadership  grows  up  that  is  comfort¬ 
able  with  quantum  models  as  outlined  by  Grabo  and  Boyd. 

However,  there  is  a  possibility  for  bottom-up  reorientation  of  the  IC  led  by  a 
cadre  of  Rising  Analytical  Leadership  old  enough  to  know  that  history  matters, 
yet  young  enough  to  be  comfortable  with  computers  and  databases.  If  we  can 
empower  that  cadre  to  lead  the  reorientation  of  the  IC,  we  can  potentially  skip  a 
generation  and  start  the  process  now.  But  if  that  cadre  is  lost,  the  IC  will  have  to 
rebuild  itself  virtually  from  scratch,  and  will  not  have  the  expertise  to  do  so  for  at 
least  a  decade. 


180 


SELECTED  BIBLIOGRAPHY 


Bodnar,  John  W.  “How  Long  Does  It  Take  to  Change  a  Culture?  Integration  at 
the  U.S.  Naval  Academy.”  Armed  Forces  and  Society  25,  no.  2  (Winter  1999): 
289-306. 

Boyd,  Col  John  R.  A  Discourse  on  Winning  and  Losing.  Collection  of  un-nurn- 
bered  briefing  slides.  August  1987. 

Clark,  Robert  M.  “Model  Based  Predictive  Techniques.”  Lecture  at  the 
National  Security  Agency  in  2001.  (Available  in:  Robert  M.  Clark.  Intelligence 
Analysis.  CQ  Press,  2003). 

Grabo,  Cynthia  M.  An  ticipating  Surprise:  Analysis  for  Strategic  Warning.  Ed. 
Jan  Goldman.  Washington,  DC:  Joint  Military  Intelligence  College’s  Center  for 
Strategic  Intelligence  Research,  2002. 

Kuhn,  Thomas.  The  Structure  of  Scientific  Revolutions.  Chicago,  IL:  Univer¬ 
sity  of  Chicago  Press,  3rd  edition,  1996. 

Krygiel,  Annette  J.  Behind  the  Wizard’s  Curtain:  An  Integration  Environment 
for  a  System  of  Systems.  Washington,  DC:  National  Defense  University,  1999. 

Mahan,  Alfred  Thayer.  From  Sail  to  Steam:  Recollections  of  Naval  Life.  New 
York:  Harper  &  Brothers,  1907. 

Rue,  GySgt  Steven  S.,  USMC.  The  Breakdown  of  the  PC  Paradigm:  Informa¬ 
tion  Display  Technology  As  Analysis  Inhibitor.  MSSI  Thesis.  Washington,  DC: 
Joint  Military  Intelligence  College,  August  2003. 

Scientific  and  Technical  Intelligence  Committee.  “The  Health  of  Scientific  and 
Technical  Intelligence:  A  Study  Conducted  by  the  Scientific  and  Technical  Intel¬ 
ligence  Committee.”  April  1998. 


181 


INDEX 


3x5  card  deck  51,134,137,142,145,155 
6-D  charts  86-88,  94,  100 

energy  considerations  88,  90,  94 
maps  87,  101 

organization  charts  93,  100,  117 
timelines  87,  102 
9/11  1,4,  56,  80 


A 


Afghan  War  33,  36-37,  41 
Agricultural  Age  17,  157,  168 
Analysis,  capability  vs  intent  14,  81,  121,  164 
Jacoby,  VADM  Lowell  6 

Asymmetric  warfare,  Williams,  LTG  James,  USAF  5-6 

B 

Bohr  Neils,  complementarity  principle  21,  25-26 
Boyd,  COL  John  12 

Clausewitz  27,  147 
command  and  control  152-153 
Darwin  27,  147 

Heisenberg  Uncertainty  Principle  27,  147 
history  34 
Napoleon  34 

OODA  Cycle  12,  30,  35,  38,  123,  136,  153 
orientation  30,  38  43,  152-153,  156,  167 
Second  Law  of  Thermodynamics  30,  147 
Sun  Tzu  34 
Strategic  Game  163 

c 


CBRNE  -  see  WMD 
Chinese  embassy  55-56 
Clark,  Robert,  intelligence  cycle  79-80 
Clausewitz  27 

Cognitive  (organizational)  74,  167 
Cold  War  33,  36,  40,  124 
Complementarity  Principle  21,  25-26 


183 


D 


Data,  dimensionality  46,  52,  86 
massive  45 

retrieval  133,  141,  151 
“shoebox”  133,  141,  151,  155,  177 
Databases  49,  56,  133,  141,  142 
entity  141-142 
Data-mining  50-51,  141 
Decision  Cycle  -  see  OODA  Cycle 
Digital  Production  System  (DPS)  152 
Dimensionality  -  see  data,  dimensionality 

E 


Emergent  properties  96 

Evidence  132-149 

extraction  134,  144 
homology  searching  138 
marshalling  135 

Evidence  and  theory  formulation  136 

F 

First-Generation  Reorienters  175,  179 

G 


Grabo,  Cynthia  5 

analysis  vs  facts  56,  94,  149,  163 

analyzing  capability  vs  analyzing  intent  14,  18,  120 

current  intelligence  9 

evidence  148-149 

judgments  155,  163 

intent  8 1 

logistics  81-82 

order-of-battle  (OB)  125 

OSINT  111-112 

strategic  warning  9-10,  70,  120 

tactical  warning  9 

warning  analysis  14,  85,  125,  149,  167 
warning  intelligence  4-5,  9-15 


184 


H 


Heisenberg,  Werner  21,  111 

Heisenberg,  Uncertainty  Principle  21,  25-26,  32,  147 

Historians/History  14,  48-51,  132,  175 

History.organizational  103 

Homology  searching  138 

HUMINT  33-34,  41,  108,  111,  113,  142,  156,  160 

Hyperbook  160 

Hyperword  160,  172,  175,  179 

Hypothesis  testing  -  see  Models,  hypothesis  testing 

I 


IMINT  33-34,  113,  142,  156,  160 
Industrial  Age  17-18,  71,  77,  157,  167 
Information  Age  17-18,  71,  77 
Information  flow  63-71,  156,  160 
Information  Overload  55 
Intelink  160 

Intelligence  Community  (IC)  48,  151,  154 
age  distribution  178 
corporate  knowledge  177-179 
need  for  mentoring  179 

need  for  training  new  analytical  leadership  1 80 
teamwork  154 

Intelligence,  Current  1,  9-12,  69,  164 
Intelligence  Cycle  80 

Intelligence,  assumptions  for  Information  Age  164-165 

Intelligence,  warning  -  see  warning 

Intelligence,  Warning,  Williams,  LTG  James,  USAF,  5-6 

J 

Jacoby,  VADM  Lowell,  analysis  6 

K 

Krygiel,  Annette,  systems  of  systems  123,  140,  151-152 
Krygiel,  Annette,  Digital  Production  System  (DPS)  152 
Kuhn  Thomas,  paradigm  shifts  21,  26 


185 


L 


Library  47-48,  133-145 
Librarians  45-49 


M 


Mahan,  Alfred  Thayer  168 

MASINT  33-34 

Maxwell-Boltzmann  Plot  88 

Military  Technical  Revolution  (MTR)  19,  167,  175 

Models,  analog  29 

analog  vs  digital  30-34 
bottom-up  vs  top-down  97,  136-137 
complementarity  principle  31,  35,  39 
digital  29 

hypothesis-testing  125-145 
Newtonian  29 
structure  vs  function  98 

two-player  zero-sum  vs  multiplayer  no-zero-sunr  39 
requirement  for  new  50,  53,  77-78 
Multidimensional  Analysis  (MDA)  99,  104-116,  154 
assessing  intent  120-121 
assessment  building  132. 
building  resumes  104 
building  institutional  profile  106 
BW  vulnerability  115 
use  of  HUMINT  107-110 
hypothesis-testing  128-129 
use  of  Intelink  161 
use  of  OSINT  111-114 
strategic  analysis  107-110,  114-116,  149-150 
targeting  collection  108- 114,  119 
WMD  and  terrorism  118-119,  150 

N 


Newton,  Isaac  17 

Newtonian  science  17-18,  27,  29,  73,  157 

Novel  Intelligence  from  Massive  Data  (NIMD)  45-46 


186 


o 


OODA  Cycle  12,  38,  167 
Actor  62,102 

and  hypothesis  testing  125-126 
Logistics  Cycle  75 
modeling  17 

national  153,  161,  179-180 
Observer  75,  127 
orientation  15,  38,  180 
Orienter  75,  127,  158 

intelligence  vs  operations  58-59,  64-65,  67-69,  81 
need  to  plan  two  cycles  ahead  70,  81-82,  165 
Operations  Cycle  75 
Organization  charts  6 1 
Organizations  58-60 
biological  58-59 

hierarchies  and  networks  compared  60-62 
hierarchies  58-59 
networks  58,  80 

“Orient  the  arrows,”  15,  86-95,  154,  164 
Orientation  15,  30,  43,  70-71,  127,  152-154,  157 
OSINT  111,  113,  156,  160 


P 


Paradigm  shift  21,  66,  169,  175 
Pearl  Harbor  3,  5,  68 
Physical  world  74 
Planck,  Max  170 
Printed  word  172 


R 


Reorienting  the  IC  175 
Reorienters,  First-Generation  175,  179 
Resource  allocation 

“guns”  vs  “butter”  1-2,  60,  63-64 
intelligence  vs  operations  60,  63-64 
today  vs  tomorrow  60,  63-64 

Revolution  in  Military  Affairs  (RMA)  17-18,  157-158,  167,  172-173 
RMA,  definition  19 


187 


Revolution  in  Military  Culture  (RMC)  19 

RMC,  definition  19 

RMC,  emergence  of  new  172-173 

Rue,  GYSGT  Steven,  hypothesis-testing  136 

s 


Science 

bioinformatics  131,  138 
biology  18,  175-176 
chemistry  18 
physics  18,  170 
political  175-176 
Science  vs  intelligence  17 
SIGINT  113,  156,  160 
Spoken  word  159 
Sputnik  1,  68 

Strategic  warning  11,  149-150 
Strongman  and  Wiseman  159,  167 
Submariners,  time-motion-analysis  (TMA)  52-53 
systems  of  systems  123,  151-152 


T 


Tactical  warning  11,  69,  164 
Terrorism  80-81 

Terrorism,  OSINT  collection  114 
Theory  132, 136-137 
Thermodynamics,  Second  Law  of  30 
Timelines  57,  61 


U 

US  Naval  Academy  169-170 

W 

Warning  1,6,  10 
Warning  analysis  11-13,  83-85 
Warning,  Strategic,  Definition  1,  164 
Warning  Tactical,  Definition  1,  164 

Williams,  LTG  James,  USAF,  asymmetric  warfare  &  warning  intelligence  5-6 
Wiseman  and  Strongman  159,  167 


188 


WMD  14-15,  81 

CBRNE  81,  114 
dual  use  14,  18 
Written  word  159 


189 


ABOUT  THE  AUTHOR 


John  Bodnar  has  recently  completed  a  year  as  a  Research  Fellow  at  the  Joint 
Military  Intelligence  College  on  sabbatical  from  his  position  as  a  biological  war¬ 
fare  analyst  for  the  Defense  Intelligence  Agency.  He  served  twenty-three  years  in 
the  Navy  in  the  submarine  force  and  Naval  Reserves.  As  a  technology  analyst  in 
the  Naval  Reserves,  CAPT  Bodnar  was  associated  with  the  Office  of  Naval 
Research  and  the  Naval  War  College  where  he  published  several  papers  on  the 
Revolution  in  Military  Affairs.  He  completed  a  doctorate  in  biochemistry  at  Ore¬ 
gon  State  University  and  postdoctoral  training  in  virology  at  Yale  University.  As  a 
research  biologist.  Dr.  Bodnar  was  a  faculty  member  at  Northeastern  University 
and  the  U.S.  Naval  Academy  and  is  currently  an  adjunct  professor  at  Villa  Julie 
College  where  he  teaches  bioinformatics.  Dr  Bodnar’s  biological  research  has 
included  laboratory  studies  on  viral  growth  and  cellular  structures  as  well  as  theo¬ 
retical  studies  and  computer  simulations  on  the  dynamics  of  gene  networks  in 
embryogenesis  and  organismal  development.  As  a  defense  analyst,  Dr.  Bodnar 
has  applied  his  network  modeling  approaches  to  several  national  and  terrorist  bio¬ 
logical  warfare  programs  and  has  provided  analytical  guidance  to  several  research 
programs  aimed  at  integrating  computer  technologies  with  analysis.  The  author 
may  be  contacted  at  JWBodnar70@hotmail.com  or  Bodnars@comcast.net. 


190 


Other  Books  from  the  Joint  Military  Intelligence  College 


Bodnar,  John  W.  Warning  Analysis  for  the  Information  Age:  Rethinking  the 
Intelligence  Process,  2003. 

Intelligence  Professionalism  in  the  Americas.  Russell  G.  Swenson  and  Susana 
C.  Lemozy,  eds.,  2003. 

Bringing  Intelligence  About:  Practitioners  Reflect  on  Best  Practices.  Russell 
G.  Swenson,  ed.,  2003. 

Grabo,  Cynthia  M.  Anticipating  Surprise:  Analysis  for  Strategic  Warning.  Jan 
Goldman,  ed.,  2002. 

Clift,  A.  Denis.  Clift  Notes,  2nd  Ed.  James  S.  Major,  ed.,  2002. 

Ensign,  Eric  S.,  LT,  USCG.  Intelligence  in  the  Rum  War  at  Sea,  1920-1933, 
2001. 

Clift,  A.  Denis.  Clift  Notes.  James  S.  Major,  ed.,  2000. 

Pickert,  Perry  L.  In  telligence  for  Multilateral  Decision  and  Action  ,  1997. 


